Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
Open service 2.16.204.72:443 · developer.sec.wellsfargo.com
2026-01-09 06:10
HTTP/1.1 200 OK
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 6045
Server-Timing: traceparent;desc="00-e07ff144e20b5914df9cd8270cccc3dc-4b3a5c6d09ff6758-01"
Access-Control-Expose-Headers: Server-Timing
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Content-Security-Policy: object-src 'none'; default-src 'none'; script-src 'self' https://*.wellsfargo.com https://*.wellsfargo.net https://*.wellsfargo.com:* https://*.wf.com https://pdx-col.eum-appdynamics.com https://assets.adobedtm.com 'nonce-i8K2ReXf/zGuFX6P2ENkOSc6fTM8gNel8AoIMYyJcO8='; style-src 'self' https://*.wellsfargo.com https://*.wellsfargo.net https://*.wellsfargo.com:* https://*.wf.com https://*.kampyle.com https://*.medallia.com 'unsafe-inline'; font-src 'self' https://*.wellsfargo.com https://*.wellsfargo.net https://*.wellsfargo.com:* https://*.wellsfargomedia.com https://*.kampyle.com https://*.medallia.com data:; img-src 'self' https://*.wellsfargo.com https://*.wellsfargo.net https://*.wellsfargo.com:* https://*.wf.com https://*.google.com https://*.kampyle.com https://*.medallia.com data:; connect-src 'self' https://*.adobedc.net https://*.wellsfargo.com https://clickstrm.wf.com https://*.wellsfargo.net https://*.wellsfargo.com:* https://*.wf.com https://pdx-col.eum-appdynamics.com https://*.google.com https://*.doubleclick.net https://*.kampyle.com https://*.medallia.com https://cdn.cookielaw.org https://*.onetrust.com; report-uri https://ort.evetest.wellsfargo.com/securereporting/reporting/v1/csp; report-to csp-endpoint; base-uri 'none'; form-action 'self' https://ciaanalytics.wellsfargo.com; frame-src 'self' https://*.wellsfargo.com https://*.wellsfargo.net https://*.wellsfargo.com:* https://*.youtube.com https://*.kampyle.com https://*.medallia.com data:; frame-ancestors 'none'; media-src 'self' https://*.wellsfargo.com https://*.wellsfargo.net https://*.wellsfargo.com:*;
report-to:
dp-xsrf-token: 1b05c172-efdc-47a1-b14a-89f9fc2e88b1
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
x-frame-options: DENY
x-content-type-options: nosniff
Last-Modified: Mon, 24 Nov 2025 04:40:18 GMT
Accept-Ranges: bytes
Content-Language: en-US
Date: Fri, 09 Jan 2026 06:10:06 GMT
Connection: close
Set-Cookie: DP-XSRF-Cookie=1b05c172-efdc-47a1-b14a-89f9fc2e88b1; Path=/; Secure
Set-Cookie: ADRUM_BTa=R:0|g:bf874b28-e60b-445c-88fd-40e9921869fb; Max-Age=30; Expires=Fri, 09 Jan 2026 06:10:36 GMT; Path=/; Secure
Set-Cookie: ADRUM_BTa=R:0|g:bf874b28-e60b-445c-88fd-40e9921869fb|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Max-Age=30; Expires=Fri, 09 Jan 2026 06:10:36 GMT; Path=/; Secure
Set-Cookie: ADRUM_BT1=R:0|i:3409808; Max-Age=30; Expires=Fri, 09 Jan 2026 06:10:36 GMT; Path=/; Secure
Set-Cookie: ADRUM_BT1=R:0|i:3409808|e:2; Max-Age=30; Expires=Fri, 09 Jan 2026 06:10:36 GMT; Path=/; Secure
Set-Cookie: ADRUM_BT1=R:0|i:3409808|e:2|t:1767939006381; Max-Age=30; Expires=Fri, 09 Jan 2026 06:10:36 GMT; Path=/; Secure
Set-Cookie: bcad7a8afbc064ae9bad1b59fb1fa6f0=9711487d066a19c09641b4d6f673628e; path=/; HttpOnly
Set-Cookie: developer_443_infra_1=!xfTPELUBJz0GCCPK4KMVdzLYZWOuf2WNwB4wLi5oIDB+2Vr17vE+Wh/m6mcFLh92ZM8P0PBX3134LA==; path=/; Httponly; Secure
Set-Cookie: DCID=i+YnFR60Kg7tdeJiwWT%2fRvi+gf6KdM0%2f0uxerHXKMgA%3d; Domain=developer.sec.wellsfargo.com; Path=/; Expires=Fri, 09 Jan 2026 06:25:06 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: _abck=7C2F43145BE46EC171052D45096579AC~-1~YAAQSR0QAp+A7TmbAQAA/19goQ/cGMMvP7lYFzOf0bXtCmpwfc6Wh3KbdkPVHlFWR3/fNMqFoLjvrC2Z1CMlqrB295xD3zuTNgsco8ryuBhPtx+x9FdZCW4ZTHUxOXAAbWMW7I63Q2LRbnFuDf8xMzwN/hNRueT/LIfBuniue86i9OweJ+unlwNPUrkDSnu/QHpkHL97mLym3hW0w0BXDKN4REKPcQIoI+lLIyi0GPE9dqT1wOkaS0T08hfI7mah38Hh2WT3DfihtxmgLldDRZ6CLbPUKAF04OkOg/dC8svauH/grw8ag3l6sCtBlwklaZbDwm2TnmHYKekdD/0OSibwUcpqM3AI+2Cs534o6mhb0EXb0+d16I4jtEC2emTw3oTAcVisa4s3cV3wvQWL52Zq1A5VqWqVAAAswbmQhLJceNf33Hp/vS/BsSZhJyXDHSOUGk3ZCA+E~-1~-1~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Sat, 09 Jan 2027 06:10:06 GMT; Max-Age=31536000; Secure
Set-Cookie: bm_sz=A8D5AA707B08C1A511717A4C318FA548~YAAQSR0QAqCA7TmbAQAA/19goR7FjFKg/NjcbkMhxi0lhCIeewes4utcqlLiNUYS275lXfUszUM2tqwsebjFQ9LBHKenqBbbMbazEvi1JMldl+osCgYoeQX+vQm7ANMIxKgX1pUyViDrjJriKYiWLKKWSnYnFFihxqW7J1E5+i7KwaKzlzfPHDa2oMlJhO30cS1KVGtA3LJoVCs4a27NEiKGSc9GO/Wfu3cyKZJ/GOlsr0mYQwuYT18/e1LWwTNyXyey6bszJ5Otq1c3TXnoyzSday7EHDq721GX40PUpK3ggipC6KKhJg8FCvtOQe804ToGE134cwqurTIv7ccuzwq5i6n+Mz9gEAU4F9tm8P2HCw==~3752242~3163184; Domain=.wellsfargo.com; Path=/; Expires=Fri, 09 Jan 2026 10:10:06 GMT; Max-Age=14400
Page title: Open Banking APIs - Payments and Data | Wells Fargo Developer Portal
<!doctype html><html lang="en"><head><meta charset="UTF-8"/><meta content="text/html;charset=utf-8" http-equiv="Content-Type"/><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="format-detection" content="telephone=no"/><title>Open Banking APIs - Payments and Data | Wells Fargo Developer Portal</title><link rel="preconnect" href="https://www15.wellsfargomedia.com"/><link rel="dns-prefetch" href="https://static.wellsfargo.com/tracking/whlsl-ceopt/utag.js" type="text/javascript" crossorigin="anonymous"/><link rel="dns-prefetch" href="https://rubicon.wellsfargo.com" type="text/javascript" crossorigin="anonymous"/><link rel="dns-prefetch" href="https://www15.wellsfargomedia.com"/><script type="text/javascript" nonce="i8K2ReXf/zGuFX6P2ENkOSc6fTM8gNel8AoIMYyJcO8=">var wcaDomain=new URL("https://wca.sec.wellsfargo.com/wcawidget/build/2.0/wca-widget.min.js").origin,preconnectLink=document.createElement("link");preconnectLink.setAttribute("rel","preconnect"),preconnectLink.setAttribute("href",wcaDomain),document.head.appendChild(preconnectLink);var prefetchLink=document.createElement("link");prefetchLink.setAttribute("rel","dns-prefetch"),prefetchLink.setAttribute("href",wcaDomain),document.head.appendChild(prefetchLink);var appDomain=new URL(encodeURI(window.location.origin));appDomain.origin.includes(".sec")||(appDomain=appDomain.origin.replace(".wellsfargo.com",".sec.wellsfargo.com"));var appPreconnectLink=document.createElement("link");appPreconnectLink.setAttribute("rel","preconnect"),appPreconnectLink.setAttribute("href",appDomain),document.head.appendChild(appPreconnectLink);var appPrefetchLink=document.createElement("link");appPrefetchLink.setAttribute("rel","dns-prefetch"),appPrefetchLink.setAttribute("href",appDomain),document.head.appendChild(appPrefetchLink)</script><script id="adrum" nonce="i8K2ReXf/zGuFX6P2ENkOSc6fTM8gNel8AoIMYyJcO8=">window.appDynamicsKey="AD-AAB-ABJ-PYM",window.appDynamicsBeaconUrl="https://pdx-col.eum-appdynamics.com"</script><script id="gbx" nonce="i8K2ReXf/zGuFX6P2ENkOSc6fTM8gNel8AoIMYyJcO8=">window.gbx_appid="DEVP1",window.gbx_env="PROD",window.gbx_rubicon_host="https://rubicon.wellsfargo.com",window.gbx_tealium_js_path="https://static.wellsfargo.com/tracking/whlsl-ceopt/utag.js"</script><script id="ot" nonce="i8K2ReXf/zGuFX6P2ENkOSc6fTM8gNel8AoIMYyJcO8=">window.ot_js_path="https://static.wellsfargo.com/assets/js/pcmp/prod/wellsfargo.com/scripttemplates/otSDKStub.js"</script><script id="devportal" nonce="i8K2ReXf/zGuFX6P2ENkOSc6fTM8gNel8AoIMYyJcO8=">devportal_version="R25.21.00.25"</script><script id="at" nonce="i8K2ReXf/zGuFX6P2ENkOSc6fTM8gNel8AoIMYyJcO8=">window.at_js_path="https://assets.adobedtm.com/d3b94cb0ef22/7a2fa52ccc0d/launch-119af39dc0c6.min.js"</script><link rel="prefetch" as="font" href="https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-rg.woff2" type="font/woff2" crossorigin="anonymous"/><link rel="prefetch" as="font" href="https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-rg.woff" type="font/woff" crossorigin="anonymous"/><link rel="prefetch" as="font" href="https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargoserif-rg.woff2" type="font/woff2" crossorigin="anonymous"/><link rel="prefetch" as="font" href="https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargoserif-rg.woff" type="font/woff" crossorigin="anonymous"/><style>@font-face{font-family:WellsFargoSans;src:url(https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-rg.woff2) format("woff2"),url(https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-rg.woff) format("woff");font-display:swap}@font-face{font-family:WellsFargoSerif;src:url(https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargoserif-rg.woff2) format("woff2"),url(https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargoserif-rg.woff) format("woff");font-display:swap}</style><link rel="icon" href="/gateway/favicon.ico"><script defer="defer" src="/gateway/index.bf9866c5c6b91eb124eb.js"></script><script de
Open service 2.16.204.72:443 · developer.sec.wellsfargo.com
2026-01-02 11:08
HTTP/1.1 200 OK
Mime-Version: 1.0
Content-Length: 188
Cache-control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Type: text/html
Date: Fri, 02 Jan 2026 11:08:34 GMT
Connection: close
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: DCID=y5puLcQsZghlhUOfFRNdbA%3d%3d; Domain=developer.sec.wellsfargo.com; Path=/; Expires=Thu, 01 Jan 1970 00:30:00 GMT;Httponly; Secure
Page title: Request Rejected
<html>
<head>
<title>Request Rejected</title>
</head>
<body>
The transaction failed.
<br>
<br>
Your support ID is: 0.5a1d1002.1767352114.280dc69
</body>
</html>
Open service 2.16.204.72:443 · developer.sec.wellsfargo.com
2025-12-23 02:39
HTTP/1.1 200 OK
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 6045
Server-Timing: traceparent;desc="00-9faea953417da671c4974f3dd7c043ff-e631d5857bdbae94-01"
Access-Control-Expose-Headers: Server-Timing
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Content-Security-Policy: object-src 'none'; default-src 'none'; script-src 'self' https://*.wellsfargo.com https://*.wellsfargo.net https://*.wellsfargo.com:* https://*.wf.com https://pdx-col.eum-appdynamics.com https://assets.adobedtm.com 'nonce-q6zXoMshZQOYBRlCVpSoedlNtyOeDa7tPjrWmAfBw7U='; style-src 'self' https://*.wellsfargo.com https://*.wellsfargo.net https://*.wellsfargo.com:* https://*.wf.com https://*.kampyle.com https://*.medallia.com 'unsafe-inline'; font-src 'self' https://*.wellsfargo.com https://*.wellsfargo.net https://*.wellsfargo.com:* https://*.wellsfargomedia.com https://*.kampyle.com https://*.medallia.com data:; img-src 'self' https://*.wellsfargo.com https://*.wellsfargo.net https://*.wellsfargo.com:* https://*.wf.com https://*.google.com https://*.kampyle.com https://*.medallia.com data:; connect-src 'self' https://*.adobedc.net https://*.wellsfargo.com https://clickstrm.wf.com https://*.wellsfargo.net https://*.wellsfargo.com:* https://*.wf.com https://pdx-col.eum-appdynamics.com https://*.google.com https://*.doubleclick.net https://*.kampyle.com https://*.medallia.com https://cdn.cookielaw.org https://*.onetrust.com; report-uri https://ort.evetest.wellsfargo.com/securereporting/reporting/v1/csp; report-to csp-endpoint; base-uri 'none'; form-action 'self' https://ciaanalytics.wellsfargo.com; frame-src 'self' https://*.wellsfargo.com https://*.wellsfargo.net https://*.wellsfargo.com:* https://*.youtube.com https://*.kampyle.com https://*.medallia.com data:; frame-ancestors 'none'; media-src 'self' https://*.wellsfargo.com https://*.wellsfargo.net https://*.wellsfargo.com:*;
report-to:
dp-xsrf-token: 580d8502-020b-49ec-bf56-4772e98a155b
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
x-frame-options: DENY
x-content-type-options: nosniff
Last-Modified: Mon, 24 Nov 2025 04:40:18 GMT
Accept-Ranges: bytes
Content-Language: en-US
Date: Tue, 23 Dec 2025 02:39:21 GMT
Connection: close
Set-Cookie: DP-XSRF-Cookie=580d8502-020b-49ec-bf56-4772e98a155b; Path=/; Secure
Set-Cookie: ADRUM_BTa=R:0|g:d9fb3355-fc0a-4b9d-929a-594e387de61a; Max-Age=30; Expires=Tue, 23 Dec 2025 02:39:50 GMT; Path=/; Secure
Set-Cookie: ADRUM_BTa=R:0|g:d9fb3355-fc0a-4b9d-929a-594e387de61a|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Max-Age=30; Expires=Tue, 23 Dec 2025 02:39:50 GMT; Path=/; Secure
Set-Cookie: ADRUM_BT1=R:0|i:3409808; Max-Age=30; Expires=Tue, 23 Dec 2025 02:39:50 GMT; Path=/; Secure
Set-Cookie: ADRUM_BT1=R:0|i:3409808|e:0; Max-Age=30; Expires=Tue, 23 Dec 2025 02:39:50 GMT; Path=/; Secure
Set-Cookie: ADRUM_BT1=R:0|i:3409808|e:0|t:1766457560971; Max-Age=30; Expires=Tue, 23 Dec 2025 02:39:50 GMT; Path=/; Secure
Set-Cookie: bcad7a8afbc064ae9bad1b59fb1fa6f0=73191cdfe0707c4f83be6572b5f3087f; path=/; HttpOnly
Set-Cookie: developer_443_infra_1=!6uRViwLFTcnXYk/K4KMVdzLYZWOufwka8R6BbeiC65/IhCwbr5DIg2ryVSzoUlFWrH+ZgPv3u1uhGw==; path=/; Httponly; Secure
Set-Cookie: DCID=KeZYkCoAl7LE4VfWLtBGtr9aI+r574PgeaPXIwQt2d0%3d; Domain=developer.sec.wellsfargo.com; Path=/; Expires=Tue, 23 Dec 2025 02:54:20 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: _abck=B5649935A03760221ED5B519EE2C0A0C~-1~YAAQSR0QAilnICubAQAAGlATSQ+IP68tN09qmWIA/2fmp4koca8J8wHwAP6Lg22EeybAyRekEbyaPYkR4o85mPiU3pRLmDln8b/OyHyczos7/3s/GmfDbCf/AI8mGa2NiitfKcOA7X1FRFp6AJ1xJ4bjSN3Hrhv41L9jbrrh4lbp44eg7bzFaGGiPKVcejtdxokSJ4btR20JpNeWrtxGcAyXy6VbW1Uk8YrDUtqExm4ODBULzGN786u/hZnk+GgWfLZOpVcJy3JdkiMQfH5Id4+4+xZOUSAOhq7mFC5Sle+2uojp+Oc1uLjxDC3iBY+XqGh+rPBxiLNSZhTwdgWdUfgp0BPZ0mZ62SnGAL4RSW3bmPCZWe7q3YWqObA6+YNjcdtp0TXIcYFuhwhGOyFqTNCWf/JY1pBTkjFaIktIvloUE8S4HjVxQhKmtW0R8d7iNsV+xmJdUlNt~-1~-1~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Wed, 23 Dec 2026 02:39:21 GMT; Max-Age=31536000; Secure
Set-Cookie: bm_sz=9F8C8CC5CD5964500D5F30AE37B0499F~YAAQSR0QAipnICubAQAAGlATSR4DFTNkQtzQlpwsSqJdYkJq5KlmynkOxZKgq96WJ1LaoqmQztchsHU3ku070YtxZ0qSIc4NLv9jZ4QHScqAoR7EbkLddSIv4Iy/2aeWsODolCWtdoToN8ik4bXG1S1PtYtZdaWxoXHkTj+n//omIu855KfnIrXTxKxPTMQZhcODfIFM5sFsba3g6gRqmkJynh+YTrnCAKLj4oe+pTOiBqbDMVnDzJ4CXXinBV3nqZ9oN5xTF7GzAsZcopM04QgVhvpJcuBjI0JlNWdWV9QhAlGHNh/34xvaHMf41+p+W75S+RILfa4Z03Q9nr3+Jq/pcja1pQIo+VsTA4/5HrteZN0=~4407606~3228214; Domain=.wellsfargo.com; Path=/; Expires=Tue, 23 Dec 2025 06:39:20 GMT; Max-Age=14399
Page title: Open Banking APIs - Payments and Data | Wells Fargo Developer Portal
<!doctype html><html lang="en"><head><meta charset="UTF-8"/><meta content="text/html;charset=utf-8" http-equiv="Content-Type"/><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="format-detection" content="telephone=no"/><title>Open Banking APIs - Payments and Data | Wells Fargo Developer Portal</title><link rel="preconnect" href="https://www15.wellsfargomedia.com"/><link rel="dns-prefetch" href="https://static.wellsfargo.com/tracking/whlsl-ceopt/utag.js" type="text/javascript" crossorigin="anonymous"/><link rel="dns-prefetch" href="https://rubicon.wellsfargo.com" type="text/javascript" crossorigin="anonymous"/><link rel="dns-prefetch" href="https://www15.wellsfargomedia.com"/><script type="text/javascript" nonce="q6zXoMshZQOYBRlCVpSoedlNtyOeDa7tPjrWmAfBw7U=">var wcaDomain=new URL("https://wca.sec.wellsfargo.com/wcawidget/build/2.0/wca-widget.min.js").origin,preconnectLink=document.createElement("link");preconnectLink.setAttribute("rel","preconnect"),preconnectLink.setAttribute("href",wcaDomain),document.head.appendChild(preconnectLink);var prefetchLink=document.createElement("link");prefetchLink.setAttribute("rel","dns-prefetch"),prefetchLink.setAttribute("href",wcaDomain),document.head.appendChild(prefetchLink);var appDomain=new URL(encodeURI(window.location.origin));appDomain.origin.includes(".sec")||(appDomain=appDomain.origin.replace(".wellsfargo.com",".sec.wellsfargo.com"));var appPreconnectLink=document.createElement("link");appPreconnectLink.setAttribute("rel","preconnect"),appPreconnectLink.setAttribute("href",appDomain),document.head.appendChild(appPreconnectLink);var appPrefetchLink=document.createElement("link");appPrefetchLink.setAttribute("rel","dns-prefetch"),appPrefetchLink.setAttribute("href",appDomain),document.head.appendChild(appPrefetchLink)</script><script id="adrum" nonce="q6zXoMshZQOYBRlCVpSoedlNtyOeDa7tPjrWmAfBw7U=">window.appDynamicsKey="AD-AAB-ABJ-PYM",window.appDynamicsBeaconUrl="https://pdx-col.eum-appdynamics.com"</script><script id="gbx" nonce="q6zXoMshZQOYBRlCVpSoedlNtyOeDa7tPjrWmAfBw7U=">window.gbx_appid="DEVP1",window.gbx_env="PROD",window.gbx_rubicon_host="https://rubicon.wellsfargo.com",window.gbx_tealium_js_path="https://static.wellsfargo.com/tracking/whlsl-ceopt/utag.js"</script><script id="ot" nonce="q6zXoMshZQOYBRlCVpSoedlNtyOeDa7tPjrWmAfBw7U=">window.ot_js_path="https://static.wellsfargo.com/assets/js/pcmp/prod/wellsfargo.com/scripttemplates/otSDKStub.js"</script><script id="devportal" nonce="q6zXoMshZQOYBRlCVpSoedlNtyOeDa7tPjrWmAfBw7U=">devportal_version="R25.21.00.25"</script><script id="at" nonce="q6zXoMshZQOYBRlCVpSoedlNtyOeDa7tPjrWmAfBw7U=">window.at_js_path="https://assets.adobedtm.com/d3b94cb0ef22/7a2fa52ccc0d/launch-119af39dc0c6.min.js"</script><link rel="prefetch" as="font" href="https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-rg.woff2" type="font/woff2" crossorigin="anonymous"/><link rel="prefetch" as="font" href="https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-rg.woff" type="font/woff" crossorigin="anonymous"/><link rel="prefetch" as="font" href="https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargoserif-rg.woff2" type="font/woff2" crossorigin="anonymous"/><link rel="prefetch" as="font" href="https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargoserif-rg.woff" type="font/woff" crossorigin="anonymous"/><style>@font-face{font-family:WellsFargoSans;src:url(https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-rg.woff2) format("woff2"),url(https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-rg.woff) format("woff");font-display:swap}@font-face{font-family:WellsFargoSerif;src:url(https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargoserif-rg.woff2) format("woff2"),url(https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargoserif-rg.woff) format("woff");font-display:swap}</style><link rel="icon" href="/gateway/favicon.ico"><script defer="defer" src="/gateway/index.bf9866c5c6b91eb124eb.js"></script><script de
Open service 2.16.204.72:443 · developer.sec.wellsfargo.com
2025-12-20 20:17
HTTP/1.1 200 OK
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 6045
Server-Timing: traceparent;desc="00-237e752ae71b3e63d61c76bb6c02996d-6c2209fa709f58dd-01"
Access-Control-Expose-Headers: Server-Timing
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Content-Security-Policy: object-src 'none'; default-src 'none'; script-src 'self' https://*.wellsfargo.com https://*.wellsfargo.net https://*.wellsfargo.com:* https://*.wf.com https://pdx-col.eum-appdynamics.com https://assets.adobedtm.com 'nonce-aysxWO70AR6rdn5fVLBVC55WjA4v/1Lry+PQXv23VJs='; style-src 'self' https://*.wellsfargo.com https://*.wellsfargo.net https://*.wellsfargo.com:* https://*.wf.com https://*.kampyle.com https://*.medallia.com 'unsafe-inline'; font-src 'self' https://*.wellsfargo.com https://*.wellsfargo.net https://*.wellsfargo.com:* https://*.wellsfargomedia.com https://*.kampyle.com https://*.medallia.com data:; img-src 'self' https://*.wellsfargo.com https://*.wellsfargo.net https://*.wellsfargo.com:* https://*.wf.com https://*.google.com https://*.kampyle.com https://*.medallia.com data:; connect-src 'self' https://*.adobedc.net https://*.wellsfargo.com https://clickstrm.wf.com https://*.wellsfargo.net https://*.wellsfargo.com:* https://*.wf.com https://pdx-col.eum-appdynamics.com https://*.google.com https://*.doubleclick.net https://*.kampyle.com https://*.medallia.com https://cdn.cookielaw.org https://*.onetrust.com; report-uri https://ort.evetest.wellsfargo.com/securereporting/reporting/v1/csp; report-to csp-endpoint; base-uri 'none'; form-action 'self' https://ciaanalytics.wellsfargo.com; frame-src 'self' https://*.wellsfargo.com https://*.wellsfargo.net https://*.wellsfargo.com:* https://*.youtube.com https://*.kampyle.com https://*.medallia.com data:; frame-ancestors 'none'; media-src 'self' https://*.wellsfargo.com https://*.wellsfargo.net https://*.wellsfargo.com:*;
report-to:
dp-xsrf-token: 7e461cca-2378-4c78-a962-8cec95d6f327
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
x-frame-options: DENY
x-content-type-options: nosniff
Last-Modified: Mon, 24 Nov 2025 04:40:18 GMT
Accept-Ranges: bytes
Content-Language: en-US
Date: Sat, 20 Dec 2025 20:17:13 GMT
Connection: close
Set-Cookie: DP-XSRF-Cookie=7e461cca-2378-4c78-a962-8cec95d6f327; Path=/; Secure
Set-Cookie: ADRUM_BTa=R:0|g:0148164b-e215-488d-99c6-7cf2d28f4648; Max-Age=30; Expires=Sat, 20 Dec 2025 20:17:43 GMT; Path=/; Secure
Set-Cookie: ADRUM_BTa=R:0|g:0148164b-e215-488d-99c6-7cf2d28f4648|n:wellsfargo-prod_43732a1d-9afc-4e95-ad69-f4ac78c780a7; Max-Age=30; Expires=Sat, 20 Dec 2025 20:17:43 GMT; Path=/; Secure
Set-Cookie: ADRUM_BT1=R:0|i:3409808; Max-Age=30; Expires=Sat, 20 Dec 2025 20:17:43 GMT; Path=/; Secure
Set-Cookie: ADRUM_BT1=R:0|i:3409808|e:28; Max-Age=30; Expires=Sat, 20 Dec 2025 20:17:43 GMT; Path=/; Secure
Set-Cookie: ADRUM_BT1=R:0|i:3409808|e:28|t:1766261833794; Max-Age=30; Expires=Sat, 20 Dec 2025 20:17:43 GMT; Path=/; Secure
Set-Cookie: bcad7a8afbc064ae9bad1b59fb1fa6f0=935a89c833bceecdb68860c36c4aa613; path=/; HttpOnly
Set-Cookie: developer_443_infra_1=!sWSToUBUfQBBGrPK4KMVdzLYZWOuf5ccc7l+06Wlm0KyodgN6H1FwS51bUSQSHZbqB3fcYYLJXEr; path=/; Httponly; Secure
Set-Cookie: DCID=1%2fhAYwnU0q%2fribHMvYZhSH6bJNaLfy8SE1ZNRYpKVVc%3d; Domain=developer.sec.wellsfargo.com; Path=/; Expires=Sat, 20 Dec 2025 20:32:13 GMT;Httponly; Secure
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: _abck=DC9D82E93C15C23BC214FFD9CFB72EBC~-1~YAAQWh0QAh3qDCubAQAAxcBoPQ9rT1c+kCpSO+eaHB4Ek04IHecOpmkd+mfTRJ/PPmVqoYssd6nIHlYaMMgHKPErXp3fM6opuZp2Mtc+eVq/s2TW20RDLG3F+9irhp1+FF5hLXQmko5+243tSMiDdSiuplKPxJp92SrpkBAY1n7S/LBC6X3dc3UjaLX96ZhrjXP/cUKp+sj/5QApu4MtlvsZGHAmYpJYUhjJ9PFffHach9+8di4KWaufd91L4UW2zgc2SaEOFuVslQUA4KPPZJhpJgIO18EPik+hy7pEYEY1Hgn3ftetWxTZcfwDZQ+cVEiMWhuboSnlglBGxylKLA/iN4+T14VcR3vYWG20rnYmHKLX2wa8GNoYYIqXY43q6B/cXAc1BhtfvQUERTPYrLGm9FVM4tG61eYB3Sfx3Gy9zVN/1aVsgoK4F3j47pApFjf9i1/j5gb6~-1~-1~-1~-1~-1; Domain=.wellsfargo.com; Path=/; Expires=Sun, 20 Dec 2026 20:17:13 GMT; Max-Age=31536000; Secure
Set-Cookie: bm_sz=74C2B24F5BE9318BE555649810540C9D~YAAQWh0QAh7qDCubAQAAxcBoPR6MeHBekCBrFxh3YjcvHwFAr1AdwAdCyzBgwdjUlMb5tJf5VelrZCw6kJQXzmiuepiV69SUgW8YbUiBAkeJ28Ns+6bn3WI3zNx6CqDzNqpMIIwF3QsuXZV1Niarv8YsB7unHrPK3ChvdTV0TrztjAfQFy+vmKmGOSgRfDh2kE1Pt5XF/GSV41vHdis5dqgZZOuPT6M0HgjpDm5I2ogEbLeo6NfcyZ0WhASyNvO75LJuVwoEIs/iqteMoAuyFv8Q1+1rFBq2f/DrOUxE14SsNaYkUJy/VOa/JKn6155FzZEHztlWHg0UiyDd0q7cIG0EnJ4uy4+VYOB9oAIkHjx2ZQ==~4601926~4277569; Domain=.wellsfargo.com; Path=/; Expires=Sun, 21 Dec 2025 00:17:13 GMT; Max-Age=14400
Page title: Open Banking APIs - Payments and Data | Wells Fargo Developer Portal
<!doctype html><html lang="en"><head><meta charset="UTF-8"/><meta content="text/html;charset=utf-8" http-equiv="Content-Type"/><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="format-detection" content="telephone=no"/><title>Open Banking APIs - Payments and Data | Wells Fargo Developer Portal</title><link rel="preconnect" href="https://www15.wellsfargomedia.com"/><link rel="dns-prefetch" href="https://static.wellsfargo.com/tracking/whlsl-ceopt/utag.js" type="text/javascript" crossorigin="anonymous"/><link rel="dns-prefetch" href="https://rubicon.wellsfargo.com" type="text/javascript" crossorigin="anonymous"/><link rel="dns-prefetch" href="https://www15.wellsfargomedia.com"/><script type="text/javascript" nonce="aysxWO70AR6rdn5fVLBVC55WjA4v/1Lry+PQXv23VJs=">var wcaDomain=new URL("https://wca.sec.wellsfargo.com/wcawidget/build/2.0/wca-widget.min.js").origin,preconnectLink=document.createElement("link");preconnectLink.setAttribute("rel","preconnect"),preconnectLink.setAttribute("href",wcaDomain),document.head.appendChild(preconnectLink);var prefetchLink=document.createElement("link");prefetchLink.setAttribute("rel","dns-prefetch"),prefetchLink.setAttribute("href",wcaDomain),document.head.appendChild(prefetchLink);var appDomain=new URL(encodeURI(window.location.origin));appDomain.origin.includes(".sec")||(appDomain=appDomain.origin.replace(".wellsfargo.com",".sec.wellsfargo.com"));var appPreconnectLink=document.createElement("link");appPreconnectLink.setAttribute("rel","preconnect"),appPreconnectLink.setAttribute("href",appDomain),document.head.appendChild(appPreconnectLink);var appPrefetchLink=document.createElement("link");appPrefetchLink.setAttribute("rel","dns-prefetch"),appPrefetchLink.setAttribute("href",appDomain),document.head.appendChild(appPrefetchLink)</script><script id="adrum" nonce="aysxWO70AR6rdn5fVLBVC55WjA4v/1Lry+PQXv23VJs=">window.appDynamicsKey="AD-AAB-ABJ-PYM",window.appDynamicsBeaconUrl="https://pdx-col.eum-appdynamics.com"</script><script id="gbx" nonce="aysxWO70AR6rdn5fVLBVC55WjA4v/1Lry+PQXv23VJs=">window.gbx_appid="DEVP1",window.gbx_env="PROD",window.gbx_rubicon_host="https://rubicon.wellsfargo.com",window.gbx_tealium_js_path="https://static.wellsfargo.com/tracking/whlsl-ceopt/utag.js"</script><script id="ot" nonce="aysxWO70AR6rdn5fVLBVC55WjA4v/1Lry+PQXv23VJs=">window.ot_js_path="https://static.wellsfargo.com/assets/js/pcmp/prod/wellsfargo.com/scripttemplates/otSDKStub.js"</script><script id="devportal" nonce="aysxWO70AR6rdn5fVLBVC55WjA4v/1Lry+PQXv23VJs=">devportal_version="R25.21.00.25"</script><script id="at" nonce="aysxWO70AR6rdn5fVLBVC55WjA4v/1Lry+PQXv23VJs=">window.at_js_path="https://assets.adobedtm.com/d3b94cb0ef22/7a2fa52ccc0d/launch-119af39dc0c6.min.js"</script><link rel="prefetch" as="font" href="https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-rg.woff2" type="font/woff2" crossorigin="anonymous"/><link rel="prefetch" as="font" href="https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-rg.woff" type="font/woff" crossorigin="anonymous"/><link rel="prefetch" as="font" href="https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargoserif-rg.woff2" type="font/woff2" crossorigin="anonymous"/><link rel="prefetch" as="font" href="https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargoserif-rg.woff" type="font/woff" crossorigin="anonymous"/><style>@font-face{font-family:WellsFargoSans;src:url(https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-rg.woff2) format("woff2"),url(https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-rg.woff) format("woff");font-display:swap}@font-face{font-family:WellsFargoSerif;src:url(https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargoserif-rg.woff2) format("woff2"),url(https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargoserif-rg.woff) format("woff");font-display:swap}</style><link rel="icon" href="/gateway/favicon.ico"><script defer="defer" src="/gateway/index.bf9866c5c6b91eb124eb.js"></script><script de