The standards maintained through the Implementation Entity cover read-only data and read/write access (account information and payment initiation with the customer's explicit consent), with an open API standard, data formats, security standards (authorisation and authentication, standardised permissions, and fair and quick approval of third parties unless regulated), governance and, for read/write, customer redress, and nothing incompatible with PSD2 (now the Payment Services Regulations 2017).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.