Before you go too much further, you might want to check the terms of service with your financial institution. They may have a clause that prohibits such things. (The usual reason for such a clause is to insure proper revenue for the API.)