wealthtech.dev

ByAllAccounts API

Morningstar · Morningstar, Inc. · Account aggregation · developers.byallaccounts.morningstar.com

Partner-gated Last checked Oct 17, 2026

ByAllAccounts, a Morningstar product, documents its investor and advisor account aggregation APIs publicly, but credentials and a DEV Firm ID are issued only after contracting. It offers a REST API with embedded OpenAPI 3.0.1 definitions, a DataConnect XML API, UI components and a Postman collection.

Developer surface

Open any row to see the page it came from, the exact words on that page and when we checked. "Not found" means we looked on the public pages listed in the note and the fact wasn't there.

API access Partner-gated
Checked on the source's own page · Oct 17, 2026
“Upon contracting, your assigned ByAllAccounts Implementation Manager will kick off the project.”
Source
https://developers.byallaccounts.morningstar.com/docs/1-access.md
Checked
Oct 17, 2026
Note
Docs are public; credentials (Firm IDs for PROD and DEV, DataConnect administrator credentials) are issued after contracting and a signed Statement of Work.
Developer docs developers.byallaccounts.morningstar.com
Checked on the source's own page · Oct 17, 2026
“Here you'll find everything you need to seamlessly integrate account aggregation into your platform, including comprehensive integration guides and API references.”
Source
https://developers.byallaccounts.morningstar.com/
Checked
Oct 17, 2026
API style REST, Bulk XML, Files over SFTP
Checked on the source's own page · Oct 17, 2026
“| [DataConnect XML API](https://www.byallaccounts.net/Manuals/DataConnect/DataConnect_V4_Ultra_User_Guide.PDF) | API | This API supports a wide variety of user registration, authentication, and data extraction operations across all user types.”
Source
https://developers.byallaccounts.morningstar.com/docs/connect-suite.md
Checked
Oct 17, 2026
Note
REST API for investor aggregation plus a DataConnect XML API. The Advisor Feed Onboarding Hub lists many custodian SFTP/FTP feeds (llms.txt capture). 'bulk-xml' is the closest enum value for DataConnect XML requests.
Authentication Partner credentials
Checked on the source's own page · Oct 17, 2026
“Invoke a DataConnect API `<SESSIONAUTHRQ>` request, providing your Administrator credentials”
Source
https://developers.byallaccounts.morningstar.com/docs/3-authenticate-users.md
Checked
Oct 17, 2026
Note
Administrator credentials authenticate a session; the response gives jsessionId and csrfToken. The REST OpenAPI definition declares an apiKey security scheme in the Authorization header.
How to get access Contract with ByAllAccounts; an Implementation Manager then configures access and issues Firm IDs for PROD and DEV plus administrator credentials.
Checked on the source's own page · Oct 17, 2026
“They will then configure your access to the ByAllAccounts platform.”
Source
https://developers.byallaccounts.morningstar.com/docs/1-access.md
Checked
Oct 17, 2026
Sandbox Yes, on request
Checked on the source's own page · Oct 17, 2026
“**ByAllAccounts Firm IDs for PROD and DEV** licensed to use the Connect Suite”
Source
https://developers.byallaccounts.morningstar.com/docs/1-access.md
Checked
Oct 17, 2026
Note
A DEV Firm ID comes with project set-up after contracting. The test-accounts page lists test financial institutions for simulating account linking.
Rate limits Not found
Not found · Oct 17, 2026
Checked
Oct 17, 2026
Note
No rate limits found on the Connect development guide, REST API landing page or endpoint reference pages read.
Webhooks Not found
Not found · Oct 17, 2026
Checked
Oct 17, 2026
Note
No webhooks found. The Connect Suite docs describe critical component events handled in the parent web page ('7. Manage Critical Events'), not server webhooks.
SDKs UI components (W3C custom HTML elements), Postman collection
Checked on the source's own page · Oct 17, 2026
“W3C custom HTML element”
Source
https://developers.byallaccounts.morningstar.com/docs/connect-suite.md
Checked
Oct 17, 2026
Note
Account Linking and Account Summary UI components; no language SDKs found. A Postman collection is published.
OpenAPI spec Published
Checked on the source's own page · Oct 17, 2026
“"openapi": "3.0.1"”
Source
https://developers.byallaccounts.morningstar.com/reference/getpositionsusingget-1.md
Checked
Oct 17, 2026
Note
Each REST endpoint page embeds its OpenAPI 3.0.1 definition; no single downloadable spec file link was found on the pages read.
Partner program Not found
Not found · Oct 17, 2026
Checked
Oct 17, 2026
Note
No partner program page found on the developer hub pages read.
Public integration list developers.byallaccounts.morningstar.com
Checked on the source's own page · Oct 17, 2026
“## Documentation: Advisor Feed Onboarding Hub”
Source
https://developers.byallaccounts.morningstar.com/llms.txt
Checked
Oct 17, 2026
Note
The hub lists custodian feed onboarding pages with FI IDs (for example Altruist - SFTP Access, Charles Schwab Institutional - SFTP). This is a list of feed sources, not a partner directory.
Ways to connect Native API, File exchange
Checked on the source's own page · Oct 17, 2026
“The Connect Suite supports two distinct user types: investors, who link their own accounts, and advisors, who link their managed/book of business accounts.”
Source
https://developers.byallaccounts.morningstar.com/docs/connect-suite.md
Checked
Oct 17, 2026

MCP servers and AI connectors

None recorded. We found no MCP server or AI connector for ByAllAccounts on the public pages we checked. See all MCP servers.

What the docs don't say

Changes

No changes recorded since this record was first published (Oct 17, 2026). Changes show up here and in the changelog.

Other account aggregation providers

Something wrong or out of date? Send a correction. We change facts only on public evidence.