Plaid logo
Docs
ALL DOCS

Consumer Report (by Plaid Check)

  • Introduction
  • Implementation
  • Migrate from Assets
  • Migrate from Income
  • Migrate from Transactions
  • Onboard users with Layer
Plaid logo
Docs
Close search modal
Ask Bill!
Ask Bill!
Hi! I'm Bill! You can ask me all about the Plaid API. Try asking questions like:
    Note: Bill isn't perfect. He's just a robot platypus that reads our docs for fun. You should treat his answers with the same healthy skepticism you might treat any other answer on the internet. This chat may be logged for quality and training purposes. Please don't send Bill any PII -- he's scared of intimacy. All chats with Bill are subject to Plaid's Privacy Policy.
    Plaid.com
    Log in
    Get API Keys
    Open nav

    Sharing Consumer Report data with partners

    Share Consumer Report data with approved partners using OAuth tokens

    Overview

    For eligible product use cases, Plaid Check provides the ability to share Consumer Reporting Agency (CRA) report information with approved partners (Fannie Mae, Freddie Mac, or Experian) using OAuth.

    To share CRA report information with partners, you need to create an OAuth access token associated with a previously created user token that your partner can use to access the information.

    Creating an OAuth token

    To create an access token that will be provided to your partner, call /oauth/token following the example below.

    For the subject_token, provide the user_token that you created using /user/create.

    The audience must match the partner you are sharing with. Valid values are:

    • urn:plaid:params:cra-partner:experian
    • urn:plaid:params:cra-partner:fannie-mae
    • urn:plaid:params:cra-partner:freddie-mac

    You can also provide multiple comma-separated values to create a token that will work with multiple partners. For example: "audience": "urn:plaid:params:cra-partner:experian,urn:plaid:params:cra-partner:fannie-mae"

    1curl 'https://sandbox.plaid.com/oauth/token' \
    2--header 'Content-Type: application/json' \
    3--data '{
    4 "client_id": "${PLAID_CLIENT_ID}",
    5 "secret": "${PLAID_SECRET}",
    6 "grant_type": "urn:ietf:params:oauth:grant-type:token-exchange",
    7 "scope": "user:read",
    8 "subject_token_type":"urn:plaid:params:credit:multi-user",
    9 "audience": "urn:plaid:params:cra-partner:fannie-mae",
    10 "subject_token": "user-sandbox-b0e2c4ee-a763-4df5-bfe9-46a46bce993d"
    11}'
    1{
    2 "access_token": "pda-RDdg0TUCB0FB25_UPIlnhA==",
    3 "expires_in": 2591999,
    4 "refresh_token": "Rpdr--viXurkDg88d5zf8m6Wl0g==",
    5 "request_id": "vPamXI8hYXPl7P2",
    6 "token_type": "Bearer"
    7}

    You can then provide the access_token to your partner.

    Revoking an OAuth token

    To revoke your token, call /oauth/revoke, passing in the access_token and/or refresh_token as the token value.

    1curl -X POST https://sandbox.plaid.com/oauth/revoke \
    2-H 'Content-Type: application/json' \
    3-d '{
    4 "client_id": "${PLAID_CLIENT_ID}",
    5 "secret": "${PLAID_SECRET}",
    6 "token": "pda-RDdg0TUCB0FB25_UPIlnhA=="
    7}'
    1{
    2 "request_id": "pCDVCQK8ve2MzhM"
    3}
    Was this helpful?
    Developer community
    GitHub
    GitHub
    Stack Overflow
    Stack Overflow
    YouTube
    YouTube
    Discord
    Discord