Skip to main content
Available in: Cloud · Desktop app · Self-hosted  |  Reach: 🇺🇸 🇨🇦 via SimpleFIN Bridge; 🇦🇺 🇳🇿 🇺🇸 via RedBark  |  Cost: the bridge’s own plan; a paid AI2Fin plan

​
What it is

SimpleFIN is an open, read-only protocol for handing an app access to your bank data. You connect your bank at a bridge, the bridge gives you a one-time setup token, and AI2Fin exchanges it for a private read-only link. There is no payment instruction in the protocol, so there is nothing to misuse. Any bridge that speaks SimpleFIN works. Two you are likely to use:

​
Connect

1

Get a setup token at your bridge

Connect your bank(s) there, then create a setup token. It is single-use and typically expires if unclaimed — SimpleFIN Bridge and RedBark both give you a short window to paste it.
2

Paste it into AI2Fin

Connectors → search your bank or choose the SimpleFIN tile → paste → Connect. AI2Fin claims the token immediately and lists the accounts it can see, so you know it worked before leaving the page.
3

Let the first sync run

Around 13 months of history is requested on the first read where the bridge has it. After that the feed polls every 15 minutes.

​
What syncs

  • Accounts, with current balance and currency
  • Transactions, including a pending flag where the bridge provides one
  • Not holdings or brokerage positions — SimpleFIN has no representation for them

​
Revoking

Disconnect in AI2Fin to stop it reading. To end the bank’s access, revoke the app at your bridge — that is where the connection lives.

​
Self-hosting note

On a hosted or self-hosted server, SIMPLEFIN_BRIDGE_ALLOWLIST restricts which bridge hostnames the server will talk to (an SSRF control). If you use a bridge other than SimpleFIN Bridge — RedBark, for instance — add its hostname to that list. On the desktop app the request originates on your own machine, so the allowlist is unset and any public bridge works.

​
Frequently asked

A bridge is a third party — but one you picked, that you pay, and that you can revoke without asking us. AI2Fin never sees your banking credentials through it; it only ever holds the read-only link the bridge issued.
Yes. Each setup token becomes its own connection. Deduplication is account-scoped, so the same account reachable through two bridges is still one set of transactions.
Try BankSync for the same country, or a statement file — no bridge required.