PSD2 API Providers Compared: Pricing, Certificates, and Coverage for EU Developers

·1 views

Developers building open-banking tools in Europe face distinct challenges that US-focused platforms like Plaid were not designed to address, including data residency rules, eIDAS certificate costs, and PSD2 compliance requirements. Under PSD2, accessing regulated bank APIs requires QWAC and QSeal certificates from qualified trust service providers, which can cost between €1,000 and €6,000 or more annually before a single API call is made. Several European aggregators — including Enable Banking, Nordigen, Yapily, TrueLayer, and Tink — hold these certificates on behalf of developers, removing that upfront burden. Some providers, such as Nordigen, offer free access to account information services under a freemium model, while others like TrueLayer and Tink target enterprise clients with usage-based or negotiated pricing. Indie and small-business developers are advised to evaluate providers based on certificate requirements, data residency policies, geographic bank coverage, and actual per-call costs rather than headline pricing.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

How SQL Strings Are Parsed Into Structured Commands in a Custom Database

A developer building a custom transactional key-value store from scratch has reached the query layer, where raw SQL strings must be translated into structured operations. The storage engine natively understands keys, values, and SSTables but has no concept of SQL, so a dedicated parsing layer is required. The parser converts statements like CREATE TABLE, INSERT, and SELECT into structured objects called Abstract Syntax Trees (ASTs), separating grammar validation from database execution logic. Each AST struct captures relevant details — such as table name, column definitions, and query conditions — without performing type conversions or storage operations. A follow-up post will cover how these parsed structs are translated into actual bytes written to disk.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Suddo tool lets AI agents handle sudo password prompts without switching terminals

A new open-source tool called Suddo aims to solve a common friction point when using AI coding agents that need to run privileged system commands. Most AI clients, such as Claude Code, lack support for pseudo-terminal (PTY) creation, forcing users to switch to a separate terminal just to enter a sudo password. Suddo works as an MCP server tool called execute_command, which intercepts sudo requests and applies user-defined rules to reject or allow them. If a command is permitted and no valid sudo timestamp exists, the tool prompts the user for their password directly within the AI chat interface. The project is available on GitHub under the username sunu15712.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why Most Developers Use the Word 'Namespace' Incorrectly

A developer essay argues that the term 'namespace' is widely misused because explanations focus on its function rather than its literal meaning — the space to which a name belongs. The author classifies a namespace as a conceptual specification, not a tool, and outlines which verbs correctly describe the relationship between code entities and namespaces. Common expressions such as 'add a namespace' or 'use a namespace' are flagged as grammatically or conceptually inaccurate. The piece uses Ruby as a primary example, explaining how class and module names are constants that can be nested, while general constants cannot serve as outer namespaces. The author also notes that Ruby's constant lookup combines lexical nesting and inheritance, which affects how outer namespace constants can or cannot be referenced.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why AI Agent Approvals Need More Than a Boolean Flag to Stay Valid

A technical analysis published on DEV Community argues that human approval in AI agent workflows is not a permanent authorization but a time-bound decision tied to specific conditions. When an agent task is approved at one moment and executed hours later, critical factors such as refund status, policy rules, approver authority, or task arguments may have changed in the interim. The article illustrates this with a refund scenario where a CNY 199 request approved at 10:00 finally reaches dispatch at 15:00, by which point multiple assumptions underlying the original approval could be invalid. The author identifies five distinct concepts — approval intent, decision, evidence, validity, and final business authority — that production systems must evaluate separately rather than collapsing into a single approved flag. The piece concludes that robust agentic systems must bind each approval to a concrete execution envelope capturing the subject, capability, arguments, policy version, and expiry time.

0 comments Read more at DEV Community