Finance — entry 005 of 47

Banco do Brasil

Verified Jul 2026

Banco do Brasil's Portal Developers exposes the bank's own APIs — Pix instant payments, Cobrança (boleto/invoice billing and collections), and PJ account/statement data — behind OAuth 2.0 client credentials issued after registering an application with a CPF or CNPJ and promoting it through sandbox, homologação (staging), and production environments. Registration and the sandbox are free; production Cobrança/Pix usage carries Banco do Brasil's standard banking transaction fees rather than a separate per-call API charge, and going live requires an approved CNPJ-linked business account, so it isn't instantly self-serve for an individual developer. This sandbox's live probes of developers.bb.com.br and its API host were blocked on every attempt by the bank's own WAF (a Brazilian "Ops! Erro no acesso" page, not a generic Cloudflare bot page), so `cors` is left `unknown` rather than guessed — independent third-party documentation (SDKs, integration guides, the bank's own blog) confirms the portal and its Pix/Cobrança APIs are live and actively used.

open-financebrazilpixbankingoauth
AuthenticationOAuthRequires an OAuth flow; expect app registration.
HTTPSSupportedTraffic is encrypted in transit.
CORSUnknownNot documented — test from the browser before relying on it.
PricingFreeNo paid tier — free for the documented use case.
FormatsJSONResponses can be requested as JSON.

GreatAPIs Score

Score71out of 100
Authentication8/25OAuth flow required
Pricing20/20Free to use
Docs14/20Documentation URL provided
Formats9/15Single response format
Freshness20/20Verified within 6 months

Embed this badge

Scored 71 on greatapis.com
<a href="https://greatapis.com/api/banco-do-brasil/"><img src="https://greatapis.com/badge/banco-do-brasil.svg" alt="Scored 71 on greatapis.com"></a>

Auth quickstart

  1. Register an app / run the OAuth flow to obtain a bearer token.
  2. Send it as an Authorization headerAuthorization: Bearer <token>
Stored keyNo key stored

Your key is stored only in this browser (localStorage) and sent directly to the API — never to greatapis.