I wrote an article about bringing financial-grade security to any API and it's now live on Nordic APIs: https://nordicapis.com/how-to-bring-financial-grade-security-to-apis/