Konfío API integration services (SME OpenFinance · Mexico)

1. ERP reconciliation for accountants

Mexican accounting firms serving SMEs frequently run CONTPAQi, Aspel or Microsip alongside the Konfío app. We pull card movements and POS terminal transactions by cycle, normalise MCC codes, and map them to cuentas contables so the accountant only validates exceptions instead of typing every line. This is a textbook OpenFinance "transactional data" use case under Mexico's Ley Fintech.

2. Cash-flow dashboards for owners

The app's "Análisis" screen already renders weekly/monthly/yearly trends. Integration exposes those aggregates as JSON and joins them with bank-account data from other Open Finance providers, giving the owner a single dashboard covering Konfío credit utilisation, card spend and POS revenue without manual Excel exports.

3. Risk & underwriting feeds

Lenders downstream of Konfío (factoring, BNPL, supplier credit) can subscribe to a webhook that emits statement-cycle events and card utilisation snapshots. The receiving system updates its scorecards, flags overdue balances and triggers re-pricing — particularly useful as Konfío pursues a banking licence and broader credit relationships.

4. Expense management & collaborator cards

Konfío supports additional cards for collaborators, with the principal cardholder retaining control. We expose per-card movement APIs plus a card on/off endpoint, enabling tools such as Clara-style policies, real-time category limits and instant freezes from a corporate dashboard.

5. POS daily settlement & tax filing

Konfío Pagos terminal transactions are pulled per day, broken down by Visa, Mastercard and AMEX, and pushed to a settlement engine that generates the SAT-ready CFDI 4.0 invoice list and daily reconciliation against the deposit in the linked bank account.

Deliverables checklist

• OpenAPI 3.1 specification covering login, credit, card, POS and analytics endpoints
• Protocol & auth flow report (token issuance, refresh, device binding, certificate pinning notes)
• Runnable Python (FastAPI) and Node.js (Express) reference clients
• Webhook receiver template for statement cycles and card events
• Postman / Bruno collection and automated end-to-end tests
• Compliance pack: consent screens, retention policy, CNBV Open Finance mapping

API example: statement export (pseudocode)

// 1) Fetch a credit-account statement for a given cycle
POST /api/v1/konfio/credit/statement
Content-Type: application/json
Authorization: Bearer <ACCESS_TOKEN>
X-Device-Id: <DEVICE_FINGERPRINT>

{
  "account_id": "credito_emp_123",
  "cycle": "2026-04",
  "format": ["json", "pdf"]
}

// 200 OK
{
  "cycle": "2026-04",
  "outstanding_balance_mxn": 412350.55,
  "payments_made": [
    {"date":"2026-04-08","amount_mxn":35000.00,"channel":"SPEI"},
    {"date":"2026-04-22","amount_mxn":40000.00,"channel":"app"}
  ],
  "cutoff_date": "2026-04-30",
  "due_date":    "2026-05-15",
  "pdf_url": "https://files.example.com/statements/2026-04.pdf"
}

API example: business card movements

GET /api/v1/konfio/card/movements?from=2026-04-01&to=2026-04-30
Authorization: Bearer <ACCESS_TOKEN>

// 200 OK
{
  "card_id": "vc_91b",
  "available_credit_mxn": 187420.00,
  "movements": [
    {
      "ts":"2026-04-12T11:43:02-06:00",
      "merchant":"Office Depot 0420",
      "mcc":"5943",
      "amount_mxn":1284.00,
      "status":"posted",
      "cardholder":"collaborator_4"
    }
  ],
  "next_page": null
}

API example: POS settlement webhook

POST https://your-app/webhooks/konfio
X-Konfio-Signature: t=1714694400,v1=8a...e2
Content-Type: application/json

{
  "event":"pos.settlement.daily",
  "merchant_id":"mch_001",
  "date":"2026-05-02",
  "totals_mxn": {"visa":24180.00,"mastercard":15890.50,"amex":4200.00,"cash":3120.00},
  "txn_count": 87,
  "deposit_eta":"2026-05-03T08:00:00-06:00"
}

// HMAC verification (Node.js)
const hmac = crypto.createHmac('sha256', SECRET).update(`${t}.${body}`).digest('hex');
if (hmac !== v1) return res.status(401).end();

Compliance & privacy

Konfío is a Sociedad Financiera de Objeto Múltiple (Sofom) actively pursuing a banking licence, so any integration must respect Mexico's Ley para Regular las Instituciones de Tecnología Financiera (Ley Fintech) and the Open Finance technical and consent guidelines published by the CNBV together with Banxico. We also align with the LFPDPPP (Mexico's data-protection law) for personal data handling and apply GDPR-style minimisation when traffic touches EU subjects.

Every deliverable ships with explicit consent screens, signed audit logs of token issuance, encrypted-at-rest storage of refresh tokens and a retention timetable that can be tightened per client.

Data flow / architecture

A typical pipeline looks like this:

1. Konfío mobile/back-end — original source of credit, card and POS data.
2. Integration gateway — our authorised client; handles login, token refresh and rate limiting.
3. Normalisation & storage — Postgres + object storage for PDFs; events fan out to Kafka or SQS.
4. Customer surface — REST API, webhooks and exports (Excel / JSON / PDF) consumed by ERP, BI or risk engines.

Market positioning & user profile

Konfío is firmly B2B and Mexico-focused. Its primary users are owners and financial controllers of small and medium-sized enterprises across manufacturing, commerce and services — exactly the segment that the company plans to grow to 10,000+ SMEs in priority sectors over the next two years. Mobile is the dominant channel, with both an Android (com.konfio.credito) and iOS build, and the platform is increasingly used by collaborator-level employees through additional cards and role-based permissions.

This profile shapes the integration: clients typically want multi-tenant behaviour (one ERP serving many merchants), Spanish locale support in error messages, and peso-only currency handling — but with cross-border reporting against USD because many partners and lenders are in the United States.

Recent changes worth noting

In December 2024 Konfío secured roughly MX$7.42 billion (≈US$370M total funding) in additional financing to scale SME lending, reaffirmed its pursuit of a banking licence, and continued expanding the Visa-backed business card from a digital-first issuance flow that approves credit lines in around six minutes. In 2025 it pushed deeper into POS acceptance via the Konfío Pagos terminal supporting Visa, Mastercard and AMEX. These moves directly increase the surface area available to OpenFinance integrators: more card volume, more POS data and more granular statement events.

About us

OpenFinance Lab is an independent studio specialising in App interface integration and authorized API integration for fintech, banking and merchant-services apps. Our engineers come from card networks, Mexican banks and protocol-analysis backgrounds, and we focus on shipping production-ready API surfaces over apps that hold valuable structured data.

• SME lending, digital banking, payment acquiring and ERP/accounting integration
• Mobile protocol analysis (Android & iOS), TLS pinning research and token-flow recovery
• Reference clients in Python, Node.js and Go; Postman/Bruno collections; OpenAPI specs
• End-to-end pipeline: scoping → analysis → build → tests → compliance review → handover
• Source code delivery from $300 — runnable API source plus full documentation; pay after delivery upon satisfaction
• Pay-per-call API billing — connect to our hosted endpoints and pay only for what you use, no upfront cost

Contact

For quotes or to share your target app and concrete needs, open our contact page:

Contact page

Typical first reply within one business day. NDAs available on request.

Engagement workflow

1. Scope confirmation: which Konfío surfaces (credit, card, POS, analytics) you need.
2. Protocol analysis & API design (2–5 business days, complexity-dependent).
3. Build & internal validation against live or sandbox data (3–8 business days).
4. Documentation, sample clients and automated tests (1–2 business days).
5. Typical first delivery: 5–15 business days; CNBV-related approvals may extend the timeline.

FAQ

What data can be integrated from the Konfío app?

How long does delivery take?

How do you handle compliance under Mexico's Ley Fintech?

Do you support both Android and iOS for protocol analysis?