e-Faktura API

Merot Bridge

Merot Bridge is a small background app — a tray icon on Windows, a menu-bar item on macOS, and a status-notifier icon (or headless service) on Linux — that keeps your qualified certificate on your own computer and signs e-Faktura documents when Merot asks it to. It’s the default signing mode (Mode A) and works identically on all three operating systems.

What it does

• Talks to your KIBS or Telekom token (or any PKCS#11-compatible token/smart card) via PKCS#11, with a Windows CNG fallback for smart cards without a PKCS#11 module.
• Shows you exactly what’s being signed — document type, number, buyer, amount — parsed from the payload itself, not just Merot’s description of it.
• Auto-updates from Merot’s own signed update feed; every release is checked on 3 operating systems in CI plus a manual token-lab run against real KIBS and Telekom tokens before it’s promoted to the stable channel.
• Never sends your key material anywhere. The private-key operation happens only on your device.

Downloads

Distribution

Signed installers only — Windows MSI (Authenticode-signed), a notarized macOS .pkg (Developer ID, universal Intel + Apple silicon), and Linux .deb/.rpm/AppImage (GPG-signed). There is no Mac App Store build — its sandboxing conflicts with loading a token’s PKCS#11 driver.

Server mode

For a Mode A installation that should sign without a person confirming every write (e.g. a back-office server that also owns the certificate), an account owner can opt that installation into unattended writes. This is audited and requires the efapi.signing.manage permission — see Signing.