UPDATE: We have released a beta version of the new bunq API documentation. NOTICE: *We have updated the sandbox base url to https://public-api.sandbox.bunq.com/v1/. Please update your applications accordingly. Check here: <https://github.com/bunq/sdk_ph
https://public-api.sandbox.bunq.com/{basePath}
Auth type
OAuth 2.0
Auth header
Authorization: Bearer YOUR_ACCESS_TOKEN
Rate limit
4,000 API calls/min (authenticated)
Pricing
Free tier available
Free quota
10 GB storage / forever
Documentation
http://bunq.com/developer
Endpoint status
Server online — HTTP 404 — server is online but path returned an error (may require auth)1.34s
(checked Mar 29, 2026)
Builder score
B
72%
builder-friendly
OAuth 2.0 or JWT (Server Authentication) for machine-to-machine
Authorization: Bearer YOUR_ACCESS_TOKEN
| Plan | Price/mo | Included |
|---|---|---|
| Individual | Free | 10 GB storage |
| Business Starter | $15 | Per user/mo, unlimited storage |
| Business | $20 | Per user/mo, advanced admin |
| Enterprise | $0 | Custom pricing |
Individual: free (10GB). Business Starter: $15/user/mo (unlimited storage). Business: $20/user/mo. Enterprise: custom.
| Method | Path | Description |
|---|---|---|
| POST | /attachment-public |
Create a new public attachment. Create a POST request with a payload that contai |
| GET | /attachment-public/{attachment-publicUUID}/content |
Get the raw content of a specific attachment. |
| GET | /attachment-public/{itemId} |
Get a specific attachment's metadata through its UUID. The Content-Type header o |
| POST | /avatar |
Avatars are public images used to represent you or your company. Avatars are use |
| GET | /avatar/{itemId} |
Avatars are public images used to represent you or your company. Avatars are use |
| GET | /device |
Get a collection of Devices. A Device is either a DevicePhone or a DeviceServer. |
| GET | /device-server |
Get a collection of all the DeviceServers you have created. |
| POST | /device-server |
Create a new DeviceServer providing the installation token in the header and sig |
curl -X GET 'https://public-api.sandbox.bunq.com/{basePath}/attachment-public' \
-H '# No auth required'
{}
Data sourced from API Map. Always verify pricing and rate limits against the official bunq documentation.