Overview
The Aperturas API opens Allaria accounts for customers your company has already verified itself. You send the complete, validated customer record; Allaria creates the account in Caja de Valores and Esco and returns the comitente number.
For internal PSPs there is no review queue. For external PSPs, Allaria runs Renaper and Repet checks on submission and may require document review.
Who this section is for
This flow exists for companies that are obliged entities (sujetos obligados): registered before the UIF, running their own customer due diligence, and legally responsible for the KYC/AML of the customers they bring.
Because you carry that responsibility, Allaria does not repeat the verification. That is the trade: you send data that is already complete and correct, and in exchange the account is created straight through.
Do not use this section — go through Onboarding instead, where Allaria performs the verification and takes responsibility for the KYC.
A company that is not registered before the UIF cannot collect and transmit its customers' personal data for account opening on its own account.
Unsure which applies to your company? Ask integraciones@allaria.com.ar before building.
| Onboarding | Aperturas | |
|---|---|---|
| Your company is an obliged entity | No | Yes |
| Who runs the KYC | Allaria | You |
| Documents | Uploaded to Allaria for review | Not reviewed by Allaria |
| Outcome | PENDING → APPROVED / REJECTED after review | Account created straight through |
| Volume | One customer per onboarding | One individual per request |
Internal and external PSPs
Your credentials place you in one of two groups, and the group changes what the account-opening endpoints require of you.
The group is resolved from your access token — there is nothing to send in the request.
- External PSP — a third-party integrator. This is you, if you are reading these docs as an Allaria client.
- Internal PSP — Allaria's own products (the wallet, agro, the assisted onboarding flow).
The difference is who performs the identity checks:
| External PSP | Internal PSP | |
|---|---|---|
| Renaper and Repet checks | Allaria runs them on submission | Not run |
frente_dni / dorso_dni | Required | Not required |
pri / matriz_riesgo_descripcion | Allaria computes them — do not send | Required — you send them |
| Business accounts also require | lugar_constitucion, canal_ingreso, fecha_ingreso, valuacion, es_entidad_publica | — |
Every field whose requirement depends on this is marked Conditional on the endpoint pages, with the group named in its description.
Two further things vary by the specific arrangement Allaria set up for you, independently of the group:
- whether
external_idis mandatory; - whether you may choose the
comitente, or Allaria assigns it from a reserved range.
Ask integraciones@allaria.com.ar to confirm both before you build the request body.
If your credentials have no group assigned at all, every account-opening call fails with 422 and the message No hay una campania asociada al usuario. Hablar con Allaria.
Account opening is only accepted between 09:30 and 17:00, Monday to Friday, on business days. Queue submissions on your side rather than retrying.
Outside that window the request fails with 422 and:
{"cuentas": ["La ventana de operación es de 9.30hs a 17hs de lunes a viernes días hábiles..."]}
Prerequisites
Every endpoint here is authenticated. Before your first call you need your IP whitelisted and an access token — see Get started.
The flow
GET /v1/aperturas/cuentas-por-cuit queries Esco live and tells you whether that CUIT/CUIL already holds accounts at Allaria, regardless of which channel opened them.
Run it before opening, so you do not create a duplicate for a person who already came in through another channel.
Fields like actividad, nacionalidad, tipo_documento, codigo_provincia_domicilio and lugar_nacimiento are validated against Allaria's catalogues. They are codes, not free text, and they are served by their own read-only endpoints — see Reference data:
- Esco catalogues — activities, countries, provinces, document types. Send the
codigo. - Caja de Valores catalogues — place of birth and locality. Send the
namefor one and thecodefor the other. - Person and tax catalogues — sex, marital status, PEP status, tax residence and province.
There are two country catalogues with different codes (Esco paises and Caja de Valores paises-cv) and they are not interchangeable. Read the reference-data pages before building the body.
Two endpoints, chosen by who the account holder is — not by a flag:
POST /v1/aperturas/apertura-cuenta— natural persons. One per request.POST /v1/aperturas/apertura-cuenta-juridica— legal entities. One per request, because the payload also carries the entity's representatives, shareholders and ultimate beneficial owners.
Both return 201 even when some accounts failed. The response is per-account: read errores and the per-CUIL entries, never the status code alone.
Account creation is asynchronous — the 201 means "accepted and queued", not "created". GET /v1/aperturas/estado-por-external-id reports where each account is:
| State | Meaning |
|---|---|
NO_ENCONTRADO | No account matches that identifier |
EN_DB | Recorded at Allaria, creation not started |
CREACION_PENDIENTE | Being created — pendientes lists the systems still missing |
COMPLIANCE_CHEQUEO_PENDIENTE | Held for a compliance check |
RECHAZADO | Rejected — left under analysis past the allowed period, or declined |
BLOQUEADO | Blocked — cannot operate |
CREACION_FINALIZADA | Done — comitente is usable |
Creating the account does not by itself grant your credentials access to it — the account must also be linked to your client_id. Allaria does this automatically once the account is operational; you no longer link accounts yourself.
GET /v1/aperturas/link-accounts/{accountNumber} returns the state of that link. Until it is COMPLETED, Movements and Position return 403 for the account.
PATCH /v1/aperturas/cuentas/pri updates the Investor Risk Profile and the terms-and-conditions acceptance date for up to 1000 accounts at once. Use it when a customer re-takes the suitability questionnaire on your side.
A separate flow for mutual fund unit holders (cuotapartistas), only for credentials Allaria has enabled for it. It does not use the comitente flow above: the account is identified by the company's CUIT.
GET /v1/aperturas/unit-holder/catalogs— the accepted values for the catalogue fields.POST /v1/aperturas/unit-holder/accounts— one company and its holders per request. Returns202: the account is created asynchronously.GET /v1/aperturas/unit-holder/accounts/{tax_id}— pollcreation_stateuntil it is final. AFAILEDorSTUCKaccount can be resubmitted.
GET /v1/aperturas/unit-holder/by-document/{document_number} lists the accounts a person holds; it needs a reader permission.
Individual vs. Business
| Individual | Business | |
|---|---|---|
| Endpoint | POST /v1/aperturas/apertura-cuenta | POST /v1/aperturas/apertura-cuenta-juridica |
| Accounts per request | Exactly 1 | Exactly 1 |
| Who is declared | The person | The entity, plus personas_fisicas (representatives), accionistas_fisicos, accionistas_juridicos and beneficiarios |
| ID images | Base64 in the request body | Uploaded first to POST /v1/aperturas/storage/push, then referenced by file name |
pri | Required only for internal PSPs | Always required |
| Extra corporate fields | — | fecha_constitucion, numero_inscripcion, tipo_registracion_juridica, estructura_accionaria, grupo_economico, es_especulativo_oportunista |
Common failure modes
| Symptom | Cause |
|---|---|
422 with No hay una campania asociada al usuario | Your credentials have no PSP group assigned — contact integraciones@allaria.com.ar |
422 on a field the docs mark optional | Your PSP group makes it required. See Internal and external PSPs |
422 on actividad, nacionalidad, tipo_documento, lugar_nacimiento | The value is not a valid catalogue code — read it from the catalogue endpoints, do not hardcode it |
422 on lugar_nacimiento or localidad specifically | You sent a code where a name is expected, or the reverse. See Caja de Valores catalogues |
201 but errores: true | The account failed. The detail is in the response body, not the status code |
Account stuck at CREACION_PENDIENTE | A downstream system (Esco, Nasdaq) has not finished. pendientes names it. If it does not clear, contact support |
403 on every endpoint here | Your credentials are not authorized for Aperturas — contact integraciones@allaria.com.ar |
422 with La ventana de operación es de 9.30hs a 17hs | You submitted outside the 09:30–17:00 business-day window |
500 with El sistema RENAPER está caído | Renaper or Repet is unavailable. Retry later — the request was not wrong |
| Request times out with no status code | Your IP is not whitelisted — see Access |
Not documented here yet
This section covers account opening, status, PRI and the catalogues those need. The service also exposes:
- multi-holder accounts (
comitente-multiples-fisicos,titular-fisico); - file upload (
storage/push); - risk-matrix lookups (
matriz/*).
Ask integraciones@allaria.com.ar if you need them before they are published here.