Windows and macOS

Merot Bridge

The signing agent for the Merot e-Faktura API.

Merot Bridge is a small background app that runs on your own computer and holds your qualified electronic signature — the same token or smart card (KIBS, Telekom, or another PKCS#11-compatible device) you already sign with. When the Merot e-Faktura API needs a document signed, it sends the request to Bridge over an outbound connection; Bridge shows you exactly what's being signed, signs it locally with your token, and sends back only the signature. Your certificate and PIN never leave your machine.

Download

v0.2.1 Released:
Download for Windows
File size
75 MB
SHA-256 checksum
3b710541feaea3d62d10d933df43b939a13585ef3914380153045215a4eea59d

Installing on Windows

  1. Download the installer above and run it. It installs for your user only — no administrator rights needed.
  2. Merot Bridge isn't code-signed yet (the certificate is in progress), so Windows will show "Windows protected your PC" the first time you run it. That's expected for a new, unsigned installer.
  3. Click "More info", then "Run anyway" to continue installing.
  4. Bridge adds an icon to your system tray and starts automatically the next time you sign in.

Installing on macOS

  1. Open the downloaded .dmg and drag Merot Bridge into Applications. Open it from there.
  2. The app is signed and notarized by Apple ("Merot, Inc."), so it opens normally.
  3. Bridge runs as a menu-bar icon — there is no Dock icon.

Hardware tokens (Gemalto IDPrime / SafeNet, used by KIBS and Makedonski Telekom) need the SafeNet Authentication Client for Mac, version 10.8.29 or later (universal). Telekom's older 10.2.100 download is Intel-only and does not work with the Apple Silicon build.

System requirements

Windows 10 or later, 64-bit (x64). macOS 15 or later (Apple Silicon or Intel).

Version history

v0.2.1
v0.2.0
  • The confirmation window now shows what you are about to sign. For purchase VAT totals: every VAT line (purchase indicator, VAT code and rate, taxable base, VAT amount) and the totals. For an accept or reject decision: the decision, the reject reason code and the comment. Supplier, invoice number, amount and the reject-reason text come from Merot and are not part of what is signed: they are shown separately, labelled "From Merot, not signed".
  • Automatic signing of accept / reject decisions and of purchase VAT totals is now a separate switch ("Automatic signing of decisions and VAT declarations") with its own warning. It is off after the update, also for computers that already sign e-invoices automatically. The account owner must allow it for this Bridge in the Merot console (a separate switch there as well). The invoice switch no longer covers these two.
  • Payloads are checked more strictly before anything is shown or signed: wrong value types, a missing key or inconsistent amounts are refused.
  • The certificate is checked before the confirmation window opens.
  • The list of automatically signed documents now shows the EUID and the decision or the VAT totals.

What's next

Windows and macOS now — Linux support is planned but not available yet.