bank-api

Why we included this project

Teams building regulated APIs in banking, fintech, or other sectors with strict data rules will find this a practical blueprint rather than a toy demo. It is a working .NET/ASP.NET Core reference implementation that shows how to satisfy OWASP API Security Top 10, OpenAPI 3.2, GDPR/CCPA data protection, and Dutch public-sector design rules in a single codebase, with response signing via JWS and a JWKS endpoint. Because it layers an MCP server on top of the OpenAPI specification, the same service can be exposed to AI assistants. That makes it a good way to study how compliance, event-driven architecture, and AI tooling fit together before you scaffold your own API. A live hosted instance and an APIs.json-compliant description let you inspect the behavior directly instead of only reading the source.