Per PSD2 RTS Articles 19-36: common and secure communication. Requirements include (a) implement dedicated Account Information Services (AIS) + Payment Initiation Services (PIS) interface (API) for Third Party Providers (TPPs) + (b) maintain TPP authentication using eIDAS qualified certificates (QWAC + QSealC) + (c) ensure API availability + performance + (d) maintain fallback mechanism in case of API unavailability + (e) implement consent management for AIS + PIS + (f) maintain audit trail for TPP access + (g) cooperate with TPPs + competent authorities.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.