From 63214952d6e0c8bc4b8de458999f8de7bf0bd0a3 Mon Sep 17 00:00:00 2001
From: Codat Pipeline Bot <oas@codat.io>
Date: Wed, 8 Apr 2026 10:23:05 +0000
Subject: [PATCH] Latest Open API Specification

---
 static/oas/Codat-Bank-Feeds.json | 81 ++++++++++++++++++++++++++++++++
 1 file changed, 81 insertions(+)

diff --git a/static/oas/Codat-Bank-Feeds.json b/static/oas/Codat-Bank-Feeds.json
index c78fe2cfd..fdeb183b4 100644
--- a/static/oas/Codat-Bank-Feeds.json
+++ b/static/oas/Codat-Bank-Feeds.json
@@ -3917,6 +3917,61 @@
         }
       }
     },
+    "/companies/{companyId}/connections/{connectionId}/bankFeeds/otp": {
+      "parameters": [
+        {
+          "$ref": "#/components/parameters/companyId"
+        },
+        {
+          "$ref": "#/components/parameters/connectionId"
+        }
+      ],
+      "post": {
+        "tags": [
+          "Source accounts"
+        ],
+        "summary": "Generate one-time password",
+        "description": "The *Generate OTP* endpoint generates a one-time password (OTP) for a bank feed connection. The OTP is returned along with an expiry time, after which it will no longer be valid.\n\n> **For Sage only**\n>\n> Only call this endpoint for connections to Sage. Calling it for other integrations will return an error.\n",
+        "operationId": "generate-otp",
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GenerateOtpResponse"
+                },
+                "examples": {}
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "402": {
+            "$ref": "#/components/responses/Payment-Required"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/Not-Found"
+          },
+          "429": {
+            "$ref": "#/components/responses/Too-Many-Requests"
+          },
+          "500": {
+            "$ref": "#/components/responses/Internal-Server-Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Service-Unavailable"
+          }
+        }
+      }
+    },
     "/companies/{companyId}/connections/{connectionId}/push/bankAccounts/{accountId}/bankTransactions": {
       "post": {
         "tags": [
@@ -6035,6 +6090,32 @@
           }
         }
       },
+      "GenerateOtpResponse": {
+        "title": "OTP response",
+        "type": "object",
+        "description": "Response containing a one-time password and its expiry time.",
+        "additionalProperties": false,
+        "properties": {
+          "otp": {
+            "type": "string",
+            "description": "The one-time password."
+          },
+          "expiry": {
+            "$ref": "#/components/schemas/DateTime",
+            "description": "The expiry date and time of the OTP in UTC."
+          }
+        },
+        "required": [
+          "otp",
+          "expiry"
+        ],
+        "examples": [
+          {
+            "otp": "GT40U4",
+            "expiry": "2026-04-08T10:30:00Z"
+          }
+        ]
+      },
       "PullOperation": {
         "title": "Pull operation",
         "description": "Information about a queued, in progress or completed pull operation.\n*Formally called `dataset`*",