Questions worth asking before you connect

Calmnect.ai connects to UK High Street banks via TrueLayer's FCA-authorised AISP infrastructure, plus Calmony accounts as a first-class peer connection type. The bank connect flow opens TrueLayer's hosted provider picker — covering all major UK banks — and on completion pulls your accounts, balances, and up to 90 days of transaction history. Important to know upfront: this is read-only access. No payments, no writes. Every connection carries a 90-day PSD2 SCA expiry; you'll receive reminders at 14, 7, and 1 day before re-authentication is needed, and the re-auth is a single tap from the email or dashboard.

There are five agents, each with a specific job. The Income Verifier analyses months of credit transactions to identify salary patterns, estimate monthly average income, and produce a structured report with a stability score — available as a downloadable JSON output or PDF. The Affordability Scorer takes a proposed monthly commitment (rent, for example) and returns a 0–100 affordability score, disposable income figure, and debt-to-income ratio. The Multi-Account Aggregator combines balances across every connected account into a single net position, accounting for pending and committed recurring spend. The Recurring Payment Detector clusters transactions by merchant, amount, and cadence to surface subscriptions and standing orders, running nightly. The Spend Categoriser assigns categories (Groceries, Transport, Bills, Salary, and so on) to uncategorised transactions after each sync. You can trigger agents on demand via the dashboard UI, the REST API, or any MCP-compatible AI client. Every run is logged with its inputs, outputs, duration, and what triggered it — visible in the Agent Activity log.

Two paths, depending on your stack. The REST API exposes endpoints for accounts, balances, transactions, and direct agent invocations — authenticated via API keys you generate in the Technical Dashboard, with tabbed code examples in curl, Python, and TypeScript ready to copy. The MCP server lets any MCP-compatible AI client (Claude, ChatGPT, Gemini) call tools like list_accounts, get_balance, list_transactions, verify_income, and score_affordability directly, scoped to your organisation via OAuth session. You can grab the MCP server URL from the dashboard — there's even a QR code for moving it to another device quickly. For event-driven architectures, outbound webhooks push transaction.created, balance.updated, connection.expiring, connection.revoked, and agent.completed events to your endpoint, signed with HMAC-SHA256, with exponential-backoff retry and a full delivery history in the dashboard.

Bank and Calmony access tokens are encrypted at rest using AES-256-GCM before they touch the database — no plaintext tokens are ever stored or logged. The platform includes a key-rotation procedure for that encryption key. Every time data is accessed — by an agent, an API key, an MCP client, or a webhook — the event is written to a data access log recording who accessed what, when, and how many records were returned; you can filter and review this in the dashboard. For GDPR rights: Article 20 data export compiles all your connections, accounts, balances, transactions, agent runs, and consents into a zip with JSON, an Excel workbook, and a PDF summary, delivered via a signed download link. Article 17 full deletion triggers a workflow that revokes all provider consents, wipes all data for your organisation, and sends a written confirmation. Calmnect.ai operates as an agent of TrueLayer, which is FCA-authorised. That regulatory disclosure is displayed persistently on every connect screen and dashboard page.

Yes. A sandbox mode in Settings populates your organisation with realistic sample bank connections, accounts, balances, and six months of transactions across multiple spending categories — no real credentials needed. Every page shows a clear 'Demo data' banner so there's no ambiguity. This is specifically designed for PropTech teams and other API buyers who want to test the REST endpoints, run agents, explore the spending and income dashboards, and validate webhook payloads before going live. When you're ready to connect a real account, the onboarding wizard walks through consent disclosures, the bank connect flow, first-sync progress, and a guided tour of the dashboards.

Yes. The PropTech embed mode strips the Calmnect chrome and renders just the bank connect flow and consent disclosures with your branding — your logo and primary colour pulled from a partner settings configuration. You embed it at a dedicated partner URL. On completion, the customer is returned to your redirect URL with a one-time code that exchanges for an API key scoped specifically to that customer's data. Your customers never leave a branded experience, and you interact with their financial data exclusively through the standard REST or MCP interfaces. Pricing details for partner embed arrangements are available on request.