MIB Faisanet — List Accounts & Balances

Account numbers and balances are returned by the Select Profile call (routePath: P47). The login initialization call (A41) returns an empty accountBalance array until a profile is selected.

Flow to Get Account Balances

[0] sfunc=i   (key1)       →  DH key exchange → derive session_key
[1] sfunc=n   A44          →  get userSalt
[2] sfunc=n   A41          →  login with password → returns operatingProfiles (no balances yet)
[3] sfunc=n   A42          →  OTP verify
[4] sfunc=n   P47          →  select profile → returns accountBalance array

Steps 0–3 are the standard login flow (see LOGIN_FLOW.md). Step 4 is the new call.

Step 1 — Get Profile List from A41 Response

The A41 login initialization response includes operatingProfiles — the list of profiles available to the user (personal, business, etc.).

Relevant fields from A41 response:

{
  "defaultProfile": "2",
  "operatingProfiles": [
    {
      "profileId": "<profile ID>",
      "customerProfileId": "<customer profile ID>",
      "annexId": "<annex ID>",
      "customerId": "<customer ID>",
      "name": "<profile display name>",
      "cifType": "Individual",
      "customerImage": "<image hash>",
      "profileType": "0",
      "color": "<hex color>"
    },
    {
      "profileId": "<profile ID>",
      "customerProfileId": "<customer profile ID>",
      "annexId": "<annex ID>",
      "customerId": "<customer ID>",
      "name": "<business name / owner name>",
      "cifType": "Sole Propr",
      "customerImage": "<image hash>",
      "profileType": "1",
      "color": "<hex color>"
    }
  ],
  "selectedProfileId": null,
  "selectedProfileType": null,
  "profileSelected": false
}

profileType values observed:

Value	Meaning
`"0"`	Individual (personal)
`"1"`	Sole Proprietor (business)

Step 2 — Select Profile (`sfunc=n`, `routePath: P47`)

Key: session key (derived from sfunc=i response)

Request:

{
  "sfunc": "n",
  "xxid": "<session xxid>",
  "data": {
    "profileType": "<profileType from operatingProfiles>",
    "profileId": "<profileId from operatingProfiles>",
    "nonce": "<computed nonce>",
    "appId": "<appId>",
    "sodium": "<random 20-bit int>",
    "routePath": "P47",
    "xxid": "<session xxid>"
  }
}

Response:

{
  "success": true,
  "reasonCode": "101",
  "reasonText": "Profile Selected!",
  "landingPage": "0",
  "accountBalance": [ ... ],
  "accessRights": { ... },
  "services": []
}

accountBalance Array

Each element in accountBalance represents one account:

{
  "cif": "<CIF number>",
  "accountNumber": "<full account number>",
  "accountBriefName": "<short label, e.g. 'SAR MVR - Savings'>",
  "template": "<display template ID>",
  "currencyCode": "<ISO 4217 numeric code>",
  "currencyName": "<ISO 4217 alpha code>",
  "accountTypeName": "<account type label>",
  "transfer": "Y",
  "branchName": "<branch name>",
  "availableBalance": "<decimal string>",
  "currentBalance": "<decimal string>",
  "blockedAmount": "<decimal string, may be negative>",
  "settlementBalance": "<decimal string>",
  "mvrBalance": "<MVR equivalent as decimal string>",
  "statusDesc": "Active"
}

Field reference

Field	Description
`accountNumber`	Full account number
`accountBriefName`	Human-readable account label
`currencyCode`	ISO 4217 numeric (e.g. `"462"` = MVR, `"840"` = USD)
`currencyName`	ISO 4217 alpha (e.g. `"MVR"`, `"USD"`)
`accountTypeName`	Account type (e.g. `"Saving Account"`)
`availableBalance`	Spendable balance
`currentBalance`	Ledger balance
`blockedAmount`	Held/blocked funds (negative means funds are held)
`settlementBalance`	Balance including pending settlements
`mvrBalance`	All balances converted to MVR for display
`transfer`	`"Y"` if account can be used as transfer source
`statusDesc`	Account status (e.g. `"Active"`)
`cif`	Customer Information File number
`template`	UI template ID (controls how card is rendered in-app)

accessRights

Also returned in the P47 response, describes what the selected profile can do:

{
  "numAccounts": "<number of accounts>",
  "packageRights": "[1,2,3,4,6,7,8,9,10,11,12,...]",
  "roleRights": "[]"
}

packageRights is a JSON array encoded as a string — parse it separately.

Notes

accountBalance in the A41 response is always []. Balances are only returned after P47.
To switch between profiles (personal ↔ business), call P47 again with the other profile's profileId and profileType.
mvrBalance is always in MVR regardless of the account's native currency, useful for showing a unified total.
All balance fields are decimal strings, not numbers — parse with Decimal for precision.

4.8 KiB Raw Blame History Unescape Escape