e-Faktura API

Merot Bridge

Merot Bridge is a small background app — a tray icon on Windows, a menu-bar item on macOS, and a status-notifier icon (or headless service) on Linux — that keeps your qualified certificate on your own computer and signs e-Faktura documents when Merot asks it to. It’s the default signing mode (Mode A) and works identically on all three operating systems.

What it does

Talks to your KIBS or Telekom token (or any PKCS#11-compatible token/smart card) via PKCS#11, with a Windows CNG fallback for smart cards without a PKCS#11 module.
Shows you exactly what’s being signed — document type, number, buyer, amount — parsed from the payload itself, not just Merot’s description of it.
Auto-updates from Merot’s own signed update feed; every release is checked on 3 operating systems in CI plus a manual token-lab run against real KIBS and Telekom tokens before it’s promoted to the stable channel.
Never sends your key material anywhere. The private-key operation happens only on your device.

Downloads

These are development builds.

Windows (64-bit): Download Merot Bridge for Windows
macOS, Apple Silicon (M1, M2, M3, M4 and later): Download for Apple Silicon
macOS, Intel: Download for Intel

Important

Windows: the installer is not code-signed yet, so Windows SmartScreen will warn when you open it: choose More info → Run anyway. Signed installers follow; installing a newer build upgrades this one and keeps your pairing.

macOS: requires macOS 15 or later. The app is signed and notarized by Apple (“Merot, Inc.”), so it opens normally. Drag Merot Bridge into Applications and open it from there; it runs as a menu-bar icon (no Dock icon). Hardware tokens (Gemalto IDPrime / SafeNet, used by KIBS and Makedonski Telekom) need the SafeNet Authentication Client for Mac, version 10.8.29 or later (universal). Telekom’s older 10.2.100 download is Intel-only and does not work with the Apple Silicon build.

Distribution

Today: an unsigned Windows MSI and notarized macOS disk images for Apple Silicon and Intel (development builds, above). Planned: Windows MSI (Authenticode-signed) and Linux .deb/.rpm/AppImage (GPG-signed). There is no Mac App Store build — its sandboxing conflicts with loading a token’s PKCS#11 driver.

Server mode

For a Mode A installation that should sign without a person confirming every write (e.g. a back-office server that also owns the certificate), an account owner can opt that installation into unattended writes. This is audited and requires the efapi.signing.manage permission — see Signing.