Version 4.0 of the Read-Write API Profile, the first major release since 2018, moves the security profile from FAPI 1 Implementers Draft 2 (no longer certified after 31 March 2025) to FAPI 1.0 Advanced, replaces non-standard codes with ISO 20022 code values and adds ISO 20022 data elements (category purpose, legal entity identifier, ultimate creditor and debtor, proxy) needed for CHAPS enhanced data from 1 May 2025; adoption is mandatory for the CMA9 with a transition period, and voluntary but practically necessary for others (FAPI migration by 31 December 2024 and ISO 20022 alignment by 31 March 2025 for non-CMA9 adopters), while TPPs support both profiles during transition.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.