The MifosSave API surface

POST /self/authentication end-user login

curl -X POST \
  https://mifos-bank-2.mifos.community/fineract-provider/api/v1/self/authentication \
  -H "Content-Type: application/json" \
  -H "fineract-platform-tenantid: mifos-bank-2" \
  -u "mifos:password" \
  -d '{"username":"+254700000001","password":"DemoExplore@2026"}'

# → { "clientId": 12, "authenticated": true, "token": "…" }
#   Use token as: Authorization: Basic base64(username:token)

POST C /companion/auth/login companion

curl -X POST \
  https://mifossave-companion.onrender.com/companion/auth/login \
  -H "Content-Type: application/json" \
  -d '{
    "username": "+254700000001",
    "password": "DemoExplore@2026",
    "tenant": "mifos-bank-2"
  }'

# → { "sessionToken": "…", "clientId": 12,
#     "groups": [ { "groupId": 1, "role": "treasurer" } ] }

🔐 Authentication 3 ops

Unified self-signup — a single login; the per-group role resolves after auth.

🏘️ Groups 8 ops

Group create, group config + corpus datatables, group detail + roles. Reads go through the companion BFF; raw /groups/* is the write path.

🗓️ Meetings 5 ops

Schedule read, attendance, meeting record, and cycle advance — the meeting engine.

💳 Loans 9 ops

Apply, group-vote, approve, disburse, reject, list, and repay.

👥 Clients & members 9 ops

Member (client) create, group association, role datatable, photo, and accounts.

💰 Savings 7 ops

Group-linked accounts, deposits, and balances. Summaries via companion BFF; raw savings are the write path.

🪙 Share-out 3 ops

Cycle share-out / rotation preview then execute.

🙋 End-user self-service 4 ops

Member-scoped reads over their own accounts + loan requests.

🔄 Offline sync 1 op

One batched POST replays the durable offline queue in order (Fineract Batch API).

🧑‍💼 Field officer 2 ops · v1.1

Supervisory reads + KPI report across an officer's assigned groups.

POST /authentication

request  { "username": "string", "password": "string" }
response { "userId": Long, "username": "string",
           "authenticated": boolean, "officeId": Long,
           "token": "string" }

POST /self/authentication

request  { "username": "string", "password": "string" }
response { "clientId": Long, "authenticated": boolean,
           "selfServiceUserDetails": object, "token": "string" }

POST /clients

request  { "firstname": String, "lastname": String,
           "mobileNo": String, "active": Boolean,
           "activationDate": String, "officeId": Long,
           "groupId": Long, "locale": String,
           "dateFormat": String }
response { "resourceId": Long, "clientId": Long }

POST /groups

request  { "name": string, "officeId": Long,
           "staffId": Long, "active": boolean,
           "activationDate": date }
response { "resourceId": Long, "fineractGroupId": Long }

POST /savingsaccounts/{id}/transactions?command=deposit

request  { "transactionDate": String,
           "transactionAmount": Long,
           "paymentTypeId": Int,   // 1 = Cash
           "locale": String, "dateFormat": String }

GET /datatables/dt_member_role/{clientId}

response { "role": string,        // treasurer | chairperson
                             // | field_officer | member
           "client_type": string, // admin | end_user
           "group_id": Long,      // the (member, group) key
           "joined_date": date }

POST /datatables register

{ "datatableName": "dt_group_corpus",
  "apptableName":  "m_group",
  "entitySubType": "GROUP",
  "multiRow": false,
  "columns": [
    { "name":"closing_balance","type":"decimal" },
    { "name":"corpus_balance", "type":"decimal" } ] }

GET /datatables/dt_group_corpus/{groupId} read

→ the running fund balance row for that group
response { "closing_balance": Decimal,
           "corpus_balance": Decimal,
           "cash_on_hand": Decimal,
           "last_updated_meeting": Int }