A Licensed Financial Institution (LFI), such as a bank or insurer, provides financial data or executes services through the UAE's central API Hub. The LFI implements Ozone Connect, the backend interface called by the Hub. TPP-facing requests and responses pass through the Hub.

The customer authenticates with the LFI in the authorization journey. The Hub acts as the OIDC/FAPI authorization server, owns consent state and issues access tokens. The LFI processes the Hub's validated requests; it does not issue the TPP's access tokens or keep an independent consent state.

Certification and production live proving are distinct from directory publication. In the production snapshot observed on , 12 of 27 registration IDs publish an active issuer. These counts do not establish how many institutions are live. Explore metadata in the Observatory and reported operational activity in the Ecosystem Watch.