FAQ

This FAQ is organized by audience. More sections will be added as the docs expand.

Customers (coming soon)

• Account access and recovery
• Transaction statuses and receipts
• Limits, reversals, and disputes

Organizations, merchants, agents, billers (coming soon)

• Onboarding and operations
• Settlements and reporting
• Troubleshooting

Developers (MiniApps)

Do miniapps get direct access to a user’s Keycloak tokens?

No. Miniapps get only a short-lived, miniapp-scoped session issued by Emali 2.0.

Can a miniapp execute money movement directly?

No. Miniapps can request payment intents. Emali 2.0 executes payments after the user confirms in a native payment sheet.

Can miniapps call arbitrary internet domains?

No. Miniapps are restricted to an allowlist, and authenticated traffic is proxied through Emali 2.0 for auditing.