GoodLeap Pros API integration (OpenFinance for sustainable home lending)

Deliverables checklist

• OpenAPI 3.1 specification covering offers, applications, contracts, payments and webhooks
• Protocol & auth-flow report (dealer login, refresh token rotation, device binding, soft-pull consent capture)
• Runnable connectors in Python and Node.js (offer pull, application submit, e-sign status, payment receipt sync)
• Automated tests against captured fixtures + a Postman / Insomnia collection
• Compliance pack: Regulation Z disclosure timing notes, CFPB PACE rule cross-reference, soft-pull audit log schema
• Hand-off session for your CRM / data-warehouse team (Salesforce, HubSpot, Snowflake, BigQuery)

Two engagement models

Pick what matches your scale. Most contractor groups start with source delivery, then graduate to hosted endpoints once volume justifies the SLA.

• Source-code delivery from $300 — receive the runnable connector and documentation; pay only after delivery upon satisfaction.
• Pay-per-call hosted API — call our managed endpoints and pay only for the requests you actually make; no upfront cost, ideal for usage-based teams.

1. Sales pipeline into Salesforce / HubSpot

Solar and home-improvement sales orgs already track quotes in Salesforce or HubSpot, but GoodLeap offer activity stays trapped in the contractor's phone. We bridge that gap: a offer.viewed event from GoodLeap Pros becomes a stage update on the matching opportunity, a application.approved event triggers an automated next-step task, and a contract.signed event closes the deal as Won. The bridge maps GoodLeap homeowner IDs to CRM contact records via deterministic email plus address hashing.

2. GoodLeap Payments → QuickBooks reconciliation

The June 2025 launch of GoodLeap Payments added tap-to-pay, ACH and saved payment methods, plus a native QuickBooks pathway. For teams already on Xero, NetSuite, or a custom ledger we replicate that pathway: a receipt webhook lands in our connector, line items are split between gross revenue, GoodLeap processing fee and sales tax, and posted to the configured chart of accounts within minutes.

3. Aurora / Enerflo design → GoodLeap proposal sync

Aurora Solar and Enerflo each offer their own GoodLeap touchpoint inside their sales-mode, but multi-platform installers need one canonical pipeline. We sit between design tools and the contractor app, taking the system-design payload (kWh, hardware bill of materials, installation address) and pre-filling the GoodLeap offer pull so the rep never re-keys numbers in front of the homeowner.

4. Compliance reporting for lender partners

GoodLeap is registered with the NMLS and operates inside the consumer-finance perimeter. Lender partners, secondary buyers and securitization trustees often demand structured evidence of soft-pull consent timing, Regulation Z disclosure delivery, and contractor identity. We emit a tamper-evident event stream that maps cleanly to those audit asks without touching the user-facing app.

5. Business intelligence on dealer performance

Once the events land in Snowflake or BigQuery you get cohort views the in-app dashboard does not show: time-to-funding by rep, drop-off between offer-shown and application-submitted, fee leakage by product family, and refinance opportunities on older 25-year solar paper. We package the schema, dbt models and a sample Looker / Metabase dashboard.

Dealer authentication (OAuth + device binding)

POST /api/v1/goodleap-pros/auth/login
Content-Type: application/json

{
  "dealer_email": "rep@solarco.example",
  "password": "************",
  "device_id": "ios-7f3c-...-9b",
  "mfa_code": "418209"
}

200 OK
{
  "access_token": "eyJhbGciOi...",
  "refresh_token": "rt_8c92...",
  "expires_in": 3600,
  "dealer_id": "DEAL_4421",
  "scope": ["offers.read", "apps.write",
           "contracts.read", "payments.read"]
}

Pull loan offers for a homeowner (soft pull)

POST /api/v1/goodleap-pros/offers
Authorization: Bearer <ACCESS_TOKEN>

{
  "homeowner": {
    "first_name": "Jane",
    "last_name": "Doe",
    "ssn_last4": "1234",
    "address": {"line1":"...","state":"CA","zip":"94110"},
    "income_annual_usd": 92000
  },
  "project": {
    "type": "solar_loan",
    "amount_usd": 28500,
    "system_kw": 7.8
  },
  "consent": {
    "soft_pull": true,
    "captured_at": "2026-05-11T14:02:11Z",
    "ip": "203.0.113.42"
  }
}

Response: array of { offer_id, apr, term_months,
  monthly_payment_usd, dealer_fee_pct, product_family }

Webhook: e-sign & funding events

POST https://your-host/webhooks/goodleap
X-GoodLeap-Signature: sha256=...

{
  "event": "contract.signed",
  "application_id": "APP_99381",
  "document_id": "DOC_22118",
  "signed_at": "2026-05-11T14:47:02Z",
  "signer_ip": "198.51.100.7",
  "next_step": "milestone_M1_pending"
}

// Other events we relay:
// offer.viewed, offer.selected,
// application.submitted, application.approved,
// payment.captured (tap_to_pay | ach | saved_card),
// milestone.verified, funding.disbursed

Regulatory perimeter

GoodLeap originates closed-end consumer credit and operates under the federal consumer-financial framework supervised by the Consumer Financial Protection Bureau (CFPB). Any connector we ship respects Regulation Z disclosure timing for home-improvement loans, the Equal Credit Opportunity Act on adverse-action data, and the Fair Credit Reporting Act on soft-pull consent capture. For PACE-style products the January 2025 CFPB final rule on Property Assessed Clean Energy financing applies, and our event schema is built so partners can demonstrate ability-to-repay determinations to securitization trustees.

Data minimization & access

We never store full Social Security numbers, only the last four digits the app collects, and only when a downstream system explicitly requires them. Bearer tokens are scoped per dealer, rotated on every refresh, and revocable per device. Homeowner PII at rest is encrypted with AES-256 and access events are logged for SOC 2-aligned reviews. State-level rules — California CCPA / CPRA, New York DFS, Texas Finance Code — are handled as named profiles you toggle per dealer territory.

Mosaic

An Oakland-based residential solar lender holding offer, application and origination data similar in shape to GoodLeap's. Many installers carry both, so a unified soft-pull-offer feed across Mosaic and GoodLeap Pros is one of the most common requests.

Sunlight Financial

A direct lender with hundreds of thousands of financed systems. Sunlight events overlap with GoodLeap on application status, stipulations and milestone-funding payloads.

Dividend Finance (Fifth Third Bank)

Residential solar plus broader home-improvement financing through a network of 700+ installers. Shared schema concerns include adverse-action codes and dealer-fee disclosures.

Sungage Financial

Solar-loan specialist whose installer portal exposes similar offer, contract and milestone records that fit the same OpenFinance event model.

Sunnova

Residential solar service provider with leases, loans and PPAs; integrators frequently need cross-product portfolio views combining Sunnova and GoodLeap originations.

Sunrun

Largest U.S. residential solar provider, primarily lease and PPA. Its dealer-tech data helps complete the picture for installers who span both lease- and loan-heavy lenders.

Renovate America

Historically the largest PACE originator; the CFPB's 2025 PACE rule directly affects how its successor products and any neighboring PACE lender expose data — relevant for compliance-grade reporting.

ServiceTitan

Field-service management platform with a native GoodLeap touchpoint. Many HVAC and roofing teams want the GoodLeap offer feed mirrored next to ServiceTitan job and invoice records.

Aurora Solar

Solar design and sales-mode platform with an official GoodLeap integration. Bridging Aurora design payloads to GoodLeap offer pulls is one of our standard scoped deliverables.

Enerflo & Enphase Solargraf

Installer enablement and quoting platforms that each ship a GoodLeap connector. Teams running multiple of these often want a deduplicated homeowner-and-application view across the lot.

About us

OpenFinance Lab is an independent studio focused on mobile-app protocol analysis and OpenData / OpenFinance / OpenBanking integration. Our engineers come from consumer-finance backends, payments infrastructure and reverse-engineering practices, and have shipped production connectors for lending, payments, banking aggregation and identity flows.

• Consumer-lending, point-of-sale finance and home-improvement underwriting
• Payments rails: ACH, card-present (tap-to-pay), wallet, and reconciliation pipelines
• Custom Python / Node.js / Go SDKs, idempotent webhook receivers, replay tooling
• End-to-end pipeline: protocol capture → schema design → build → tests → compliance hand-off
• Source-code delivery from $300 — runnable connector + documentation, pay after delivery
• Pay-per-call hosted API — usage-based, no upfront commitment, scales with your dealer base

Contact

Tell us your target dealer scope and which downstream system you want the data in (Salesforce, HubSpot, Snowflake, QuickBooks, BigQuery, or your own warehouse). We respond with a scoped proposal within one business day.

Open contact page

Engagement workflow

1. Scope confirmation — dealer accounts, data scope, downstream system (1–2 business days)
2. Protocol capture & schema design — covering auth, offer pull, application submit, e-sign, payments (3–5 business days)
3. Connector build & internal validation against recorded fixtures (3–8 business days)
4. Compliance review, docs, sample dashboards, hand-off session (1–2 business days)
5. Typical first delivery in 5–15 business days; partner approvals from Aurora, Enerflo or ServiceTitan may extend the timeline.

FAQ

What do you need from me to start a GoodLeap Pros integration?

How long does a first delivery take?

How do you handle CFPB and PACE compliance?