Developer hooks & REST API

Extend BankBridge with WordPress hooks, override templates, or call the REST API from your own front end.

Common actions

Action	Fires when
bankbridge_item_linked	A bank connection is stored ($row, $metadata, $context)
bankbridge_item_status_changed	Connection health changes
bankbridge_item_removed	A connection is removed
bankbridge_transactions_synced	A sync finished
bankbridge_transfer_created / _status_changed / _declined / _refunded	Payment lifecycle
bankbridge_recurring_transfer_created / _cancelled	Recurring schedules
bankbridge_payout_sent	A payout was created
bankbridge_idv_status_changed, bankbridge_user_verified, bankbridge_user_unverified	Verification changes
bankbridge_identity_matched	Identity Match completed
bankbridge_guest_item_claimed	A guest connection moved to a user
bankbridge_webhook	Any Plaid webhook processed
bankbridge_wc_processor_token	WooCommerce processor-token settlement

Useful filters

Filter	Use
bankbridge_link_token_request	Modify the /link/token/create body
bankbridge_transfer_authorization_request	Modify transfer authorization
bankbridge_signal_decision	Override the risk decision
bankbridge_identity_match_threshold	Pass mark (default 70)
bankbridge_user_is_verified	Custom verification logic
bankbridge_mandate_text	Change the authorization text
bankbridge_allow_guest_bank_payments	Allow guests conditionally
bankbridge_rate_limit	Tune rate limits
bankbridge_template	Swap template paths
bankbridge_integration_classes	Register integrations
bankbridge_friendly_error_message	Customise customer-facing errors

Example

add_action( 'bankbridge_transfer_status_changed', function ( $row, $old_status, $new_status ) {
	if ( 'settled' === $new_status ) {
		// Fulfil the order, notify your ERP…
	}
}, 10, 3 );

REST API (namespace bankbridge/v1)

Route	Method	Who
/link-token, /exchange	POST	Logged-in users (guests when guest payments are on)
/items, /accounts, /transactions, /insights, /portfolio, /debts, /recurring	GET	The current user (own data only)
/items/{id}, /items/{id}/refresh, /balances/{id}	DELETE / POST / GET	Owner
/pay, /identity-match, /idv/refresh, /recurring/{id}/cancel	POST	Owner
/apply/*	GET/POST	Applicants
/webhook	POST	Plaid (signature verified)
/admin/*	various	Capability-gated admin routes

Cookie-authenticated requests need the X-WP-Nonce header (wp_rest nonce).