Core SDK JS

Introduction

This library provides a comprehensive JavaScript SDK for interacting with the Mbanq payment API. It offers type-safe payment operations with built-in validation, multi-tenant support, and a modern fluent API design.

Installation

npm install @mbanq/core-sdk-js

Quick Start

import { createInstance, CreatePayment, GetTransfers } from '@mbanq/core-sdk-js';

const client = createInstance({
  baseUrl: 'https://api.cloud.mbanq.com',
  tenantId: 'your-tenant-id'
});

await client.connect({
  credential: {
    client_id: 'your-client-id',
    client_secret: 'your-client-secret',
    username: 'your-username',
    password: 'your-password',
    grant_type: 'password'
  }
});

// Create payment
const payment = await client.request(CreatePayment({
  amount: 100.00,
  currency: 'USD',
  paymentRail: 'ACH',
  paymentType: 'CREDIT',
  originator: { accountId: '123456789' },
  recipient: {
    name: 'Jane Smith',
    accountNumber: '987654321',
    accountType: 'SAVINGS',
    recipientType: 'INDIVIDUAL',
    address: {
      line1: '789 Oak Ave',
      city: 'Another Town',
      stateCode: 'CA',
      countryCode: 'US',
      postalCode: '54321'
    },
    bankInformation: { routingNumber: '321070007' }
  }
}));

// Get transfers
const transfers = await client.request(GetTransfers({
  transferStatus: 'EXECUTION_SCHEDULED',
  executedAt: '2025-01-22',
  paymentType: 'ACH',
  queryLimit: 200
}));

Setup

Authentication

The SDK uses OAuth 2.0 password grant flow for authentication:

const client = createInstance({
  baseUrl: 'https://api.cloud.mbanq.com',
  tenantId: 'your-tenant-id'
});

await client.connect({
  credential: {
    client_id: 'your-client-id',
    client_secret: 'your-client-secret',
    username: 'your-username',
    password: 'your-password',
    grant_type: 'password'
  }
});

Additional Configuration Options

const client = createInstance({
  // Required configuration
  baseUrl: 'https://api.cloud.mbanq.com',
  tenantId: 'your-tenant-id',
  
  // Optional configuration
  axiosConfig: {
    timeout: 30000, // Request timeout in milliseconds (default: 29000)
    keepAlive: true, // HTTP keep-alive for connection reuse
    headers: {
      'Custom-Header': 'custom-value' // Additional HTTP headers
    }
  }
});

// Authenticate with OAuth credentials
await client.connect({
  credential: {
    client_id: 'your-client-id',
    client_secret: 'your-client-secret',
    username: 'your-username',
    password: 'your-password',
    grant_type: 'password'
  }
});

Two-Factor Authentication (2FA)

If your account has Two-Factor Authentication (2FA) enabled, you must verify your identity using a One-Time Password (OTP) after the initial connection.

const client = createInstance({
  baseUrl: 'https://api.cloud.mbanq.com',
  tenantId: 'your-tenant-id'
});

// 1. Initial connection
// Returns 2FA status: { isMFARequired, mfaDeliveryMethods, isSelfServiceUser, isPasswordExpired }
const { isMFARequired, mfaDeliveryMethods } = await client.connect({
  credential: {
    client_id: 'your-client-id',
    client_secret: 'your-client-secret',
    username: 'your-username',
    password: 'your-password',
    grant_type: 'password'
  }
});

if (isMFARequired) {
  // 2. Perform 2FA verification if required
  // mfaDeliveryMethods contains available methods, e.g. ['TOTP']
  await client.twoFactorAuthentication({
    token: '123456', // The OTP code
    deliveryMethod: 'email'
  });
}

// 3. Perform authorized requests
try {
  const result = await client.request(CreatePayment({ /* ... */ }));
} catch (error) {
  // NOTE: If you receive an AUTHORIZATION_ERROR with code 'RESTRICTED' 
  // and message "Access to type ... is restricted", it means your 2FA token 
  // has expired. You must perform 2FA verification again.
  if (error.code === 'RESTRICTED') {
    await client.twoFactorAuthentication({ /* ... */ });
  }
}

Security Best Practices

Credential Management

Never hardcode credentials in your source code
Use environment variables or secure credential management systems
Rotate API secrets and tokens regularly
Use the minimum required permissions for your integration

Environment Variables Example

const client = createInstance({
  baseUrl: process.env.MBANQ_API_URL,
  tenantId: process.env.MBANQ_TENANT_ID
});

await client.connect({
  credential: {
    client_id: process.env.MBANQ_CLIENT_ID,
    client_secret: process.env.MBANQ_CLIENT_SECRET,
    username: process.env.MBANQ_USERNAME,
    password: process.env.MBANQ_PASSWORD,
    grant_type: 'password'
  }
});

Production Considerations

Use HTTPS endpoints only (https://)
Implement proper error handling to avoid credential leakage in logs
Configure appropriate request timeouts
Use connection pooling for high-volume applications

Axios Instance Logger

You can also configure an Axios instance logger to set up interceptors or other axios-specific configurations:

const axiosLogger = (axiosInstance) => {
  // Add request interceptor
  axiosInstance.interceptors.request.use(
    (config) => {
      console.log('Request:', config.method?.toUpperCase(), config.url);
      return config;
    }
  );
  
  // Add response interceptor
  axiosInstance.interceptors.response.use(
    (response) => {
      console.log('Response:', response.status, response.config.url);
      return response;
    }
  );
};

const coreSDK = createInstance({
  secret: 'testing123',
  signee: 'TESTING',
  baseUrl: 'https://example.com',
  tenantId: 'testing',
  logger: axiosLogger // Configure Axios instance
});

Middleware

The SDK supports middleware for cross-cutting concerns like logging and metrics. Middleware functions are executed automatically around command execution.

Note: This is different from the Axios instance logger above. Middleware loggers handle command-level logging, while the Axios logger handles HTTP request/response logging.

Understanding Middleware Concepts

There are three key concepts to understand:

Middleware - A wrapper that runs code before/after command execution
Logger Interface - A contract defining what methods a logger object must have
Custom Middleware - Your own middleware implementing the Middleware interface

Quick Comparison

Concept	What It Is	When to Use
Logging Middleware	Pre-built middleware for logging commands	Use `createLoggingMiddleware(logger)` when you want automatic command logging
Logger Interface	Contract for logger objects	Implement this when creating a custom logger for Logging Middleware
Metrics Middleware	Pre-built middleware for tracking metrics	Use `createMetricsMiddleware(client)` when you want to track command metrics
Custom Middleware	Build-your-own middleware	Implement the Middleware interface when you need custom behavior

1. Logging Middleware

Purpose: Automatically logs command execution details (inputs, outputs, errors).

Basic Usage (with console):

import { createInstance, createLoggingMiddleware } from '@mbanq/core-sdk-js';

const client = createInstance({
  secret: 'testing123',
  signee: 'TESTING',
  baseUrl: 'https://example.com',
  tenantId: 'testing',
  middlewares: [createLoggingMiddleware(console)]
});

With Custom Logger:

First, create a logger that implements the Logger interface:

// Logger Interface - what your logger must implement
interface Logger {
  info: (message: string, ...args: unknown[]) => void;   // Required
  error: (message: string, ...args: unknown[]) => void;  // Required
  warn?: (message: string, ...args: unknown[]) => void;  // Optional
  log?: (message: string, ...args: unknown[]) => void;   // Optional
}

// Example: Custom logger implementation
const customLogger = {
  info: (message, ...args) => myLoggingService.info(message, args),
  error: (message, ...args) => myLoggingService.error(message, args),
  warn: (message, ...args) => myLoggingService.warn(message, args)
};

// Use your custom logger with Logging Middleware
const middleware = createLoggingMiddleware(customLogger);

const client = createInstance({
  secret: 'testing123',
  signee: 'TESTING',
  baseUrl: 'https://example.com',
  tenantId: 'testing',
  middlewares: [middleware]
});

2. Metrics Middleware

Purpose: Tracks command execution metrics (counters for started, completed, and error events).

Usage:

import { createInstance, createMetricsMiddleware } from '@mbanq/core-sdk-js';

// Your metrics client must implement the MetricsClient interface
const metricsClient = {
  incrementCounter: (counterName) => {
    // Increment your counter (e.g., Prometheus, StatsD, etc.)
    console.log(`Counter: ${counterName}`);
  },
  recordError: (error) => {
    // Optional: Record error details
    console.error('Command error:', error);
  }
};

const client = createInstance({
  secret: 'testing123',
  signee: 'TESTING',
  baseUrl: 'https://example.com',
  tenantId: 'testing',
  middlewares: [createMetricsMiddleware(metricsClient)]
});

MetricsClient Interface:

interface MetricsClient {
  incrementCounter: (counterName: string) => void;  // Required
  recordError?: (error: Error) => void;             // Optional
}

3. Custom Middleware

Purpose: Create your own middleware for custom behavior (e.g., performance monitoring, audit logging, caching).

Middleware Interface:

interface Middleware {
  before?: (command: Command) => Promise<void>;              // Called before execution
  after?: (command: Command, response: any) => Promise<void>; // Called after success
  onError?: (command: Command, error: Error) => Promise<void>; // Called on error
}

Example - Performance Monitoring:

const performanceMiddleware = {
  before: async (command) => {
    command._startTime = Date.now();
    console.log(`[${command.metadata.commandName}] Starting...`);
  },
  after: async (command, response) => {
    const duration = Date.now() - command._startTime;
    console.log(`[${command.metadata.commandName}] Completed in ${duration}ms`);
  },
  onError: async (command, error) => {
    const duration = Date.now() - command._startTime;
    console.error(`[${command.metadata.commandName}] Failed after ${duration}ms:`, error.message);
  }
};

const client = createInstance({
  secret: 'testing123',
  signee: 'TESTING',
  baseUrl: 'https://example.com',
  tenantId: 'testing',
  middlewares: [performanceMiddleware]
});

Using Multiple Middleware

You can combine multiple middleware together. They execute in the order provided:

const client = createInstance({
  secret: 'testing123',
  signee: 'TESTING',
  baseUrl: 'https://example.com',
  tenantId: 'testing',
  middlewares: [
    createLoggingMiddleware(console),      // Logs commands
    createMetricsMiddleware(metricsClient), // Tracks metrics
    performanceMiddleware                   // Custom performance tracking
  ]
});

Execution Order:

All before hooks run in order
Command executes
All after hooks run in reverse order (or onError if command fails)

API Reference

The SDK uses a Command Pattern for all operations. Commands are created using factory functions and executed via the client's request() method. Each command function includes detailed JSDoc documentation describing its parameters, return types, and usage.

Available Commands

Account Operations

Command	Description
`GetAccount`	Retrieve detailed information about a specific savings account
`UpdateAccount`	Update account settings and configurations
`DeleteAccount`	Delete a savings account
`GetAccountsOfClient`	Get all accounts associated with a specific client
`CreateAndActivateAccount`	Create and immediately activate a new savings account
`ActivateAccount`	Activate an existing account
`ApproveAccount`	Approve a pending account
`RejectAccount`	Reject a pending account
`UndoApprovalAccount`	Undo approval of an account
`CloseAccount`	Close an existing account
`PostInterestAsOn`	Post interest to an account as of a specific date
`CalculateInterestAsOn`	Calculate interest for an account as of a specific date
`WithdrawByClientId`	Process a withdrawal for a client's account
`DepositByClientId`	Process a deposit to a client's account

Account Product Operations

Command	Description
`CreateAccountProduct`	Create a new account product configuration
`UpdateAccountProduct`	Update an existing account product
`GetAllAccountProducts`	Retrieve all available account products
`GetAccountProductById`	Get details of a specific account product

Account Statement Operations

Command	Description
`GenerateAccountStatement`	Generate a statement for an account
`DownloadAccountStatement`	Download a generated account statement
`GetAccountDocumentsDetails`	Get details of account documents

Charge Operations

Command	Description
`AddChargeToAccount`	Add a charge to a savings account
`GetChargesByAccountId`	Get all charges for a savings account
`AddChargeToLoanAccount`	Add a charge to a loan account
`GetChargesByLoanAccountId`	Get all charges for a loan account
`WaiveChargeFromAccount`	Waive a charge from a savings account
`UndoChargeToAccount`	Undo a charge transaction
`PayAccountCharge`	Pay a pending charge on an account

Card Operations

Command	Description
`GetCards`	Retrieve all cards for a specific client
`GetCardById`	Get detailed information about a specific card by ID
`GetCardAuthorizations`	List card authorizations with filtering options (status, pagination, sorting)
`GetCardAuthorizationById`	Retrieve detailed information about a specific card authorization including transaction details, merchant information, and optional associations (notes/media)
`GetCardSettlements`	List all card settlements with comprehensive filtering (date range, status, pagination, sorting). A settlement is where a card transaction is finalized and funds are transferred from the cardholder to the merchant
`GetCardSettlementById`	Retrieve detailed information about a specific card settlement by ID, including client info, merchant details, transaction amounts, batch information, and interchange fees
`SendAuthorizationToCore`	Send card authorization request to core system
`UpdateCardID`	Update client card identification information (URL and QR code)
`GetCards`	Retrieve all cards associated with a specific client
`GetCardById`	Get detailed information for a specific card by ID
`GetCardImageUrl`	Get the URL for a card's visual representation/image
`GetCardAuthorizations`	Retrieve all card authorizations with filtering and pagination
`CreateCard`	Create a new debit or credit card (virtual or physical)
`ChangeCardType`	Change the product type of an existing card
`ActivatePhysicalCard`	Activate a physical card that has been issued
`OrderPhysicalCard`	Request fulfillment/shipment of a physical card
`SetPIN`	Generate a secure URL for card PIN changes
`AddCardToMobileWallet`	Provision a card for Apple Pay or Google Pay
`UpdateCardFeature`	Enable/disable card features (POS, online, ATM, international)
`UpdateCardLimit`	Update card limits and velocity rules (purchase and ATM)

Card Operations Usage Examples

Card Creation and Management

import { 
  createInstance, 
  CreateCard, 
  GetCards, 
  GetCardById,
  ChangeCardType,
  ActivatePhysicalCard,
  OrderPhysicalCard
} from '@mbanq/core-sdk-js';

const client = createInstance({
  secret: 'your-secret',
  signee: 'YOUR-SIGNEE',
  baseUrl: 'https://api.cloud.mbanq.com',
  tenantId: 'your-tenant-id'
});

// Create a debit card with existing savings account
const debitCard = await client.request(CreateCard({
  productId: 123,
  savingsAccountId: 456789,
  clientId: 98765
}));

// Create a credit card
const creditCard = await client.request(CreateCard({
  productId: 124,
  creditAccountId: 456790,
  userId: 555
}));

// Get all cards for a client
const clientCards = await client.request(GetCards(98765));
console.log('Client cards:', clientCards);

// Get specific card details
const cardDetails = await client.request(GetCardById(debitCard.id));
console.log('Card status:', cardDetails.status);

// Change card product type
await client.request(ChangeCardType(debitCard.id, { productId: 125 }));

// Order physical card for virtual card
const physicalCard = await client.request(OrderPhysicalCard(debitCard.id));

// Activate physical card once received
const activation = await client.request(ActivatePhysicalCard(physicalCard.id));
console.log('Card token:', activation.cardToken);

Card Features and Limits

import { 
  UpdateCardFeature, 
  UpdateCardLimit 
} from '@mbanq/core-sdk-js';

// Update card features
const features = await client.request(UpdateCardFeature(cardId, {
  posPaymentEnabled: true,
  onlinePaymentEnabled: true,
  atmWithdrawalsEnabled: false,
  internationalPaymentsEnabled: true,
  blockedCountries: ['US', 'CA']
}));

// Update card limits and velocity rules
const limits = await client.request(UpdateCardLimit(cardId, {
  purchase: [{
    single: {
      transactionAmount: 1000,
      numberOfTransactions: 5
    },
    daily: {
      transactionAmount: 5000,
      numberOfTransactions: 20
    },
    monthly: {
      transactionAmount: 15000,
      numberOfTransactions: 100
    }
  }],
  atm: [{
    daily: {
      transactionAmount: 2000,
      numberOfTransactions: 10
    },
    weekly: {
      transactionAmount: 5000,
      numberOfTransactions: 25
    }
  }]
}));

Mobile Wallet Integration

import { AddCardToMobileWallet } from '@mbanq/core-sdk-js';

// Apple Pay provisioning
const applePaySetup = await client.request(AddCardToMobileWallet(cardId, {
  walletProvider: 'APPLE_PAY',
  certificate1: 'apple-cert-1-data',
  certificate2: 'apple-cert-2-data',
  nonce: 'apple-nonce-value'
}));

// Google Pay provisioning
const googlePaySetup = await client.request(AddCardToMobileWallet(cardId, {
  walletProvider: 'GOOGLE_PAY',
  deviceID: 'android-device-id',
  walletAccountID: 'google-wallet-account-id'
}));

console.log('Provisioning data:', applePaySetup.data.activationData);

Card Authorization Management

import { 
  GetCardAuthorizations, 
  SendAuthorizationToCore,
  GetCardImageUrl,
  SetPIN
} from '@mbanq/core-sdk-js';

// Get card authorizations with filtering
const authorizations = await client.request(GetCardAuthorizations({
  cardToken: 'card-uuid-token',
  status: 'ACTIVE',
  limit: 50,
  offset: 0,
  orderBy: 'createdAt',
  sortOrder: 'desc',
  isActiveCardAuthorizations: true
}));

console.log('Total authorizations:', authorizations.totalFilteredRecords);
console.log('Recent transactions:', authorizations.pageItems);

// Send authorization to core system
await client.request(SendAuthorizationToCore({
  card: { 
    internalCardId: 'card-123', 
    cardType: 'DEBIT' 
  },
  payload: { 
    amount: 1000, 
    currency: 'USD',
    merchant: 'Merchant Name'
  },
  flag: 'AUTH_CAPTURE',
  skipNotification: false
}));

// Get card image URL for display
const { imageUrl } = await client.request(GetCardImageUrl(cardId));

// Generate PIN change URL
const pinSetup = await client.request(SetPIN(cardId));
console.log('PIN change URL:', pinSetup.data);

Card ID and Visual Updates

import { UpdateCardID } from '@mbanq/core-sdk-js';

// Update card identification with custom branding
await client.request(UpdateCardID({
  clientId: 98765,
  businessCardIDURL: 'https://your-brand.com/card-design.png',
  businessCardIDQRCode: 'base64-encoded-qr-code-data'
}));

Card Types and Features

Card Types

Debit Cards: Linked to savings accounts for spending available balance
Credit Cards: Linked to credit accounts with revolving credit limits
Virtual Cards: Digital-only cards for online and mobile payments
Physical Cards: Physical plastic cards with EMV chip and contactless support

Supported Mobile Wallets

Apple Pay: iPhone, iPad, Apple Watch support
Google Pay: Android devices and Google Wallet integration

Card Features Control

POS Payments: Enable/disable point-of-sale transactions
Online Payments: Control e-commerce and online purchases
ATM Withdrawals: Manage cash withdrawal capabilities
International Payments: Allow/restrict international transactions
Contactless Payments: Tap-to-pay functionality
Blocked Countries: Geographically restrict card usage

Velocity Limits and Controls

Single Transaction: Maximum amount per transaction
Daily Limits: Total amount and transaction count per day
Weekly Limits: Total amount and transaction count per week
Monthly Limits: Total amount and transaction count per month
ATM vs Purchase: Separate limits for ATM withdrawals vs purchases

Authorization Management

Real-time Authorizations: Process card transactions in real-time
Authorization History: Track all card transaction attempts
Status Tracking: Monitor authorization statuses (ACTIVE, COMPLETED, REJECTED, etc.)
Filtering and Search: Find specific transactions by criteria
Merchant Details: Complete transaction merchant information

Card Product Operations

Command	Description
`Create Credit Product`	List all available card products with pagination
`GetCardProduct`	Get details of a specific card product by ID
`CreateCardProduct`	Create a new card product configuration
`UpdateCardProduct`	Update an existing card product

Credit Card Product Operations

Command	Description
`CreateCreditProduct`	Use the API to create and activate a credit product.
`GetCreditProduct`	Use this API to retrieve the credit card product details.

Credit Account Operations

Command	Description
`GetCreditAccountTransactionById`	Get detailed information for a specific credit account transaction by ID
`GetCreditAccountPendingTransactions`	Retrieve all pending transactions (card authorizations on hold) for a credit account
`GetCreditAccountCompletedTransactions`	Retrieve all completed/posted transactions for a credit account with optional filtering
`GetCreditAccountDetails`	Retrieve comprehensive details of a credit account including balances, limits, and billing information
`GetCreditAccountBilledStatements`	Retrieve all billing statements generated for a credit account
`DownloadCreditAccountBilledStatement`	Download a specific billing statement document for a credit account
`CreateCreditAccountPayment`	Process a payment to reduce the outstanding balance on a credit account
`CreateCreditAccountAutoPayInternal`	Set up automatic payment from an internal account to pay credit account balance
`CreateCreditAccountAutoPayExternal`	Set up automatic payment from an external bank account to pay credit account balance
`CreateUnsecuredCreditAccount`	Create a new unsecured credit account for a client
`CreateSecuredCreditAccount`	Create a new secured credit account with collateral account
`ApproveCreditAccount`	Approve a pending credit account application, activating it for use
`AdjustCreditAccountLimits`	Adjust the credit limit and cash advance limit for an existing credit account

Acquire Card Operations

Command	Description
`GetAcquiredCards`	Retrieve all acquired/external cards for a specific client
`GetAcquiredCardById`	Get detailed information about a specific acquired card by ID
`AddAcquiredCard`	Add an acquired card to a client's external cards list
`BlockAcquiredCardAddition`	Block the addition of acquired cards from external sources for a client
`UnblockAcquiredCardAddition`	Unblock the addition of acquired cards from external sources for a client

Client Operations

Command	Description
`GetClient`	Retrieve detailed client information with optional related data
`UpdateClient`	Update client information
`CreateClient`	Create a new client record
`GetClients`	List clients with filtering and pagination
`DeleteClient`	Delete a client record
`VerifyWithActivateClients`	Verify and optionally activate a client
`GetStatusOfVerifyClient`	Get verification status of a client
`CloseClient`	Close a client account

Client Address Operations

Command	Description
`GetClientAddress`	Retrieve client address information
`CreateClientAddress`	Add a new address for a client
`UpdateClientAddress`	Update existing client address
`SetClientAddressStatus`	Set the status of a client address

Client Classification Operations

Command	Description
`GetClientClassification`	Get current classification of a client
`SwitchClientClassification`	Switch client to a different classification
`CancelSwitchClientClassification`	Cancel a pending classification switch

Client Identifier Operations

Command	Description
`ListClientDocument`	List all identity documents for a client
`GetPermittedDocumentTypes`	Get allowed document types for a client
`CreateClientIdentifier`	Create a new identity document for a client
`UpdateClientIdentifier`	Update an existing identity document
`DeleteClientDocument`	Delete a client identity document
`ApproveRejectClientDocument`	Approve or reject a client document
`UploadClientIdentifierDocument`	Upload a document file for client identifier

Custom Operations

Command	Description
`CustomUpdate`	Execute a custom update operation
`CustomCreate`	Execute a custom create operation
`CustomGet`	Execute a custom get operation

DataTable Operations

Command	Description
`CreateEntryInDataTable`	Create a new entry (row) in a data table with support for JSON data or file uploads
`GetEntriesFromDataTable`	Retrieve all entries from a data table including column metadata and structure
`UpdateEntryInDataTable`	Update an existing entry in a data table by its unique identifier
`DeleteEntryFromDataTable`	Delete an entry from a data table by its unique identifier
`GetDataTableProductMappingTemplate`	Get template for entity data table product mapping with available entities, data tables, and products
`CreateDataTableProductMapping`	Create a mapping between an entity table, data table, and product
`GetDataTableProductMappings`	Retrieve list of entity data table product mappings with pagination and filtering support
`GetDataTableProductMappingById`	Retrieve a specific entity data table product mapping by its unique identifier
`DeleteDataTableProductMapping`	Delete a specific entity data table product mapping by its unique identifier

FX Pay Operations

Command	Description
`GetCurrencyTemplates`	Retrieve all available currency templates
`GetFetchFxRates`	Retrieve FX rates for a currency pair
`LockFxRate`	Lock an FX rate for a currency pair
`GetTransferCharges`	Retrieve charges for a transfer
`CreateAndSubmitTransfer`	Create and submit a transfer

Global Configuration Operations

Command	Description
`GetConfigurations`	Retrieve all system configurations
`GetConfigurationByName`	Get a specific configuration by name
`EnableDisableConfiguration`	Enable or disable a configuration
`UpdateConfiguration`	Update a configuration value

Payment Operations

Command	Description
`CreatePayment`	Create a new payment
`GetPayment`	Retrieve payment details by ID
`UpdatePayment`	Update an existing payment
`DeletePayment`	Delete a payment
`GetPayments`	List payments with filtering options

Recipient Operations

Command	Description
`GetRecipient`	Get details of a specific recipient
`CreateRecipient`	Create a new payment recipient
`DeleteRecipient`	Delete a recipient
`GetRecipients`	List all recipients for a client

Transaction Operations

Command	Description
`GetPendingTransactions`	Query pending transactions with filters
`GetCompletedTransactions`	Query completed transactions with filters
`GetRecentTransactions`	Retrieve recent transactions including status (Completed, Pending, Rejected) and card information
`GetTransactionById`	Get details of a specific transaction by ID with optional enriched data
`GetBankDetailsFromRoutingCode`	Get bank details from routing code for ACH or WIRE transfers

Transfer Operations

Command	Description
`GetTransfers`	List transfers with filtering options
`CreateTransfer`	Create a new money transfer
`GetTransfer`	Retrieve transfer details by ID
`MarkAsSuccess`	Mark a transfer as successfully completed
`MarkAsProcessing`	Mark a transfer as currently processing
`MarkAsReturned`	Mark a transfer as returned with reason
`LogFailTransfer`	Log a failed transfer with error details
`MarkAsFail`	Mark a transfer as failed
`UpdateTraceNumber`	Update the trace number for a transfer

User Operations

Command	Description
`GetUserDetail`	Get current user details
`EnableSelfServiceAccess`	Enable self-service access for a user
`UpdateSelfServiceUser`	Update self-service user information
`DeleteSelfServiceUser`	Delete a self-service user

Loan Operations

Command	Description
`CreateLoan`	Create a new loan application
`ApproveLoan`	Approve a loan application
`GetLoanById`	Get loan details by ID
`DisburseLoanToLinkedAccount`	Disburse a loan to a linked savings account
`DisburseLoan`	Disburse a loan with payment details
`CalculateLoanSchedule`	Calculate loan repayment schedule without creating the loan
`MakeRepayment`	Make a repayment on a loan (installments, advance, or late payments)
`GetLoanPreclosureTemplate`	Get preclosure template with transaction details and payment options
`PreCloseLoan`	Pre-close a loan by early repayment of the entire outstanding amount
`GetLoanTransactionDetails`	Retrieve detailed information about a specific loan transaction
`GetLoanWriteoffTemplate`	Retrieve the write-off template with reason options for loan write-off
`WriteLoanOff`	Write off an unrecoverable loan and close it as written off
`GetLoanSearchTemplate`	Retrieve the ad-hoc search query template for loans
`GetSearchData`	Generic search across various resources (loans, clients, etc.) with query support

Card Operations

Command	Description
`GetCards`	Retrieve all cards for a specific client
`GetCardById`	Get detailed information about a specific card by ID
`GetCardImageUrl`	Get the URL for a card's visual representation
`GetCardAuthorizations`	Retrieve all card authorizations with filtering and pagination
`GetCardAuthorizationById`	Retrieve detailed information about a specific card authorization
`GetCardSettlements`	List all card settlements with comprehensive filtering
`GetCardSettlementById`	Retrieve detailed information about a specific card settlement
`CreateCard`	Create a new debit or credit card
`ChangeCardType`	Change the product type of an existing card
`ActivatePhysicalCard`	Activate a physical card that has been issued
`OrderPhysicalCard`	Request fulfillment/shipment of a physical card
`SetPIN`	Generate a secure URL for card PIN changes
`AddCardToMobileWallet`	Provision a card for Apple Pay or Google Pay
`UpdateCardFeature`	Enable/disable card features
`UpdateCardLimit`	Update card limits and velocity rules
`TerminateCard`	Terminate a card
`SuspendCard`	Suspend a card
`ActivateCard`	Activate a card
`ReactivateCard`	Reactivate a suspended card
`ReplaceCard`	Replace a card
`RenewCard`	Renew a card

Note Operations

Command	Description
`CreateNote`	Create a note for a resource
`GetNotes`	Get notes for a resource
`GetNoteById`	Get a specific note by ID
`DeleteNote`	Delete a note

Notification Operations

Command	Description
`GetSubscribers`	Use this API to retrieve all the configured subscribers
`GetSubscriber`	Retrieve detailed information about a specific subscriber by ID
`CreateSubscriber`	Use this API to add a new subscriber for a webhook, email, or client email.
`UpdateSubscriber`	Use this API to update the details of an existing subscriber using the provided subscriber ID.
`DeleteSubscriber`	Use this API to delete a subscriber by the provided subscriber ID.
`CreateSubscription`	Use this API to create one or more subscriptions for a subscriber.
`GetSubscriptions`	Use this API to retrieve a list of all subscriptions.
`DeleteSubscription`	Use this API to delete a subscription by the provided subscription ID
`GetSubscriptionEvents`	Use this API to retrieve the list of available entities and their associated actions for a specific subscription type.

Report Operations

Command	Description
`GetReports`	Use this API to fetch all the existing reports configured in the system according to bank requirements. The response contains the values for each report and its associated parameters.
`GetReportParameters`	Use this API to fetch all the parameters which are linked to a specific report, which are required for the execution of the report.
`RunReport`	Use this API to run and receive specific reporting data from the database by passing the report name as a path parameter. Supports dynamic parameters, generic result sets, CSV export, and multiple output formats (HTML, PDF, CSV).

Documentation

For detailed information about specific features and APIs, refer to the following resources:

API Documentation

Mbanq API Reference - Official API documentation with detailed endpoint information, request/response schemas, and examples

Quick Links

Authentication - OAuth credential configuration
Middleware Configuration - Logging, metrics, and custom middleware
Error Handling Patterns - Error types and handling strategies
Type Definitions - Complete schema and type reference

Type Safety & Validation

The SDK uses Zod for runtime type validation and TypeScript for compile-time type safety.

Supported Payment Rails

ACH - Automated Clearing House
SAMEDAYACH - Same Day ACH
WIRE - Domestic Wire Transfer
SWIFT - International Wire Transfer
INTERNAL - Internal Transfer
FXPAY - Foreign Exchange Payment
CARD - Card Payment

Payment Statuses

DRAFT, AML_SCREENING, AML_REJECTED
EXECUTION_SCHEDULED, EXECUTION_PROCESSING, EXECUTION_SUCCESS, EXECUTION_FAILURE
RETURNED, CANCELLED, COMPLIANCE_FAILURE, DELETED, UNKNOWN

Validation Features

Input Validation: All create/update operations validate data structure
Response Validation: API responses are validated before returning
Custom Rules: WIRE transfers require recipient address with state/country
Type Safety: Full TypeScript support with inferred types

Error Handling

The SDK provides a unified error handling pattern across REST and GraphQL APIs. All errors are normalized to a consistent SdkError structure.

SdkError Structure

interface SdkError extends Error {
  name: 'SdkError';
  message: string;                    // Human-readable error message
  statusCode?: number;                // HTTP status code (REST only)
  classification: ErrorClassification; // Error category
  requestId?: string;                 // Request tracking ID
  details?: ErrorDetails;             // Structured error details
  cause?: Error;                      // Original error (minimal)
}

type ErrorClassification =
  | 'VALIDATION_ERROR'      // 400, 422 - Invalid input
  | 'AUTHENTICATION_ERROR'  // 401 - Invalid credentials
  | 'AUTHORIZATION_ERROR'   // 403 - Insufficient permissions
  | 'NOT_FOUND'             // 404 - Resource not found
  | 'RATE_LIMIT'            // 429 - Too many requests
  | 'NETWORK_ERROR'         // No response from server
  | 'SERVER_ERROR'          // 500+ - Server issues
  | 'GRAPHQL_ERROR'         // GraphQL-specific errors
  | 'UNKNOWN_ERROR';        // Unclassified errors

interface ErrorDetails {
  errorCode?: string;           // API error code (e.g., 'error.msg.client.id.invalid')
  validationErrors?: Array<{    // Field-level errors
    field: string;
    message: string;
    code?: string;
    value?: unknown;
    args?: unknown[];
  }>;
  path?: string[];              // GraphQL field path
  graphqlCode?: string;         // GraphQL extension code
}

Basic Error Handling

import { isSdkError, SdkError } from '@mbanq/core-sdk-js';

try {
  const result = await client.request(GetClient(123));
} catch (error) {
  if (isSdkError(error)) {
    console.log('Error:', error.message);
    console.log('Classification:', error.classification);
    console.log('Status:', error.statusCode);
    console.log('Request ID:', error.requestId);
    
    // Access structured details
    if (error.details?.validationErrors) {
      error.details.validationErrors.forEach(ve => {
        console.log(`Field ${ve.field}: ${ve.message}`);
      });
    }
  }
}

Classification-Based Handling

try {
  await client.request(CreatePayment(paymentData));
} catch (error) {
  if (isSdkError(error)) {
    switch (error.classification) {
      case 'AUTHENTICATION_ERROR':
        // Refresh token or re-authenticate
        await client.connect(credentials);
        break;
      case 'AUTHORIZATION_ERROR':
        // Check 2FA or permissions
        console.log('Access denied:', error.message);
        break;
      case 'VALIDATION_ERROR':
        // Show field errors to user
        error.details?.validationErrors?.forEach(e => {
          showFieldError(e.field, e.message);
        });
        break;
      case 'NOT_FOUND':
        // Resource doesn't exist
        console.log('Resource not found');
        break;
      case 'NETWORK_ERROR':
        // Retry or show offline message
        console.log('Network issue, please retry');
        break;
      case 'SERVER_ERROR':
        // Log and show generic error
        console.error('Server error:', error.requestId);
        break;
    }
  }
}

REST Error Example

When a REST API returns an error like:

{
  "developerMessage": "The requested resource is not available.",
  "httpStatusCode": "404",
  "defaultUserMessage": "The requested resource is not available.",
  "userMessageGlobalisationCode": "error.msg.resource.not.found",
  "errors": [{
    "developerMessage": "Client with identifier 21994 does not exist",
    "defaultUserMessage": "Client with identifier 21994 does not exist",
    "userMessageGlobalisationCode": "error.msg.client.id.invalid",
    "parameterName": "id",
    "value": null,
    "args": [{"value": 21994}]
  }]
}

The SDK transforms it to:

{
  name: 'SdkError',
  message: 'The requested resource is not available.',
  statusCode: 404,
  classification: 'NOT_FOUND',
  details: {
    errorCode: 'error.msg.resource.not.found',
    validationErrors: [{
      field: 'id',
      message: 'Client with identifier 21994 does not exist',
      code: 'error.msg.client.id.invalid',
      value: null,
      args: [21994]
    }]
  }
}

GraphQL Error Example

GraphQL errors like 2FA/permission issues:

{
  "message": "Access to type 'PaymentRecipientTypeFormats' is restricted",
  "extensions": { "code": "RESTRICTED", "classification": "DataFetchingException" }
}

Are transformed to:

{
  name: 'SdkError',
  message: "Access to type 'PaymentRecipientTypeFormats' is restricted",
  classification: 'AUTHORIZATION_ERROR',
  details: {
    graphqlCode: 'RESTRICTED',
    errorCode: 'RESTRICTED'
  }
}

Type Guards

import { isSdkError } from '@mbanq/core-sdk-js';

// Check if error is an SdkError
if (isSdkError(error)) {
  // TypeScript knows error is SdkError
  console.log(error.classification);
}

Accessing Original Error

For debugging, the original error is available via the standard cause property:

if (isSdkError(error) && error.cause) {
  console.log('Original error:', error.cause.message);
  console.log('Axios code:', (error.cause as any).code);
}

Examples

Complete Transfer Flow Example

import { createInstance, CreateTransfer, GetTransfer, MarkAsSuccess } from '@mbanq/core-sdk-js';

// Initialize the client
const client = createInstance({ 
  baseUrl: 'https://api.cloud.mbanq.com', 
  tenantId: 'your-tenant-id' 
});

await client.connect({
  credential: {
    client_id: 'your-client-id',
    client_secret: 'your-client-secret',
    username: 'your-username',
    password: 'your-password',
    grant_type: 'password'
  }
});

// Create an ACH transfer
const achTransfer = await client.request(CreateTransfer({
  amount: 1500,
  currency: 'USD',
  paymentRail: 'ACH',
  paymentType: 'CREDIT',
  debtor: {
    name: 'Alice Corporation',
    identifier: '111222333',
    accountType: 'CHECKING',
    agent: {
      name: 'First National Bank',
      identifier: '021000021'
    }
  },
  creditor: {
    name: 'Bob Enterprises',
    identifier: '444555666',
    accountType: 'CHECKING',
    agent: {
      name: 'Second Federal Bank',
      identifier: '121000248'
    }
  },
  reference: ['Invoice-2025-001']
}));

console.log('Created transfer:', achTransfer.id);

// Get transfer details
const transfer = await client.request(GetTransfer(achTransfer.id));
console.log('Transfer status:', transfer.status);

// Mark transfer as successful
if (transfer.status === 'EXECUTION_PROCESSING') {
  await client.request(MarkAsSuccess(transfer.externalId, 'ACH'));
  console.log('Transfer marked as successful');
}

Error Handling Example

import { isSdkError, CreateTransfer } from '@mbanq/core-sdk-js';

try {
  const transfer = await client.request(CreateTransfer({
    amount: -100, // Invalid: negative amount
    currency: 'INVALID', // Invalid: not 3-character code
    // Missing required fields
  }));
} catch (error) {
  if (isSdkError(error)) {
    console.error('Transfer creation failed:');
    console.error('Code:', error.code);
    console.error('Message:', error.message);
    if (error.requestId) {
      console.error('Request ID:', error.requestId);
    }
  } else {
    console.error('Unexpected error:', error);
  }
}

For more detailed information or support, please contact our support team or visit our developer portal.

Name		Name	Last commit message	Last commit date
Latest commit History 19 Commits
CHANGELOG.md		CHANGELOG.md
LICENSE		LICENSE
README.md		README.md

Folders and files

Latest commit

History

Repository files navigation

Core SDK JS

Table of Contents

Introduction

Installation

Quick Start

Setup

Authentication

Additional Configuration Options

Two-Factor Authentication (2FA)

Security Best Practices

Credential Management

Environment Variables Example

Production Considerations

Axios Instance Logger

Middleware

Understanding Middleware Concepts

Quick Comparison

1. Logging Middleware

2. Metrics Middleware

3. Custom Middleware

Using Multiple Middleware

API Reference

Available Commands

Account Operations

Account Product Operations

Account Statement Operations

Charge Operations

Card Operations

Card Operations Usage Examples

Card Creation and Management

Card Features and Limits

Mobile Wallet Integration

Card Authorization Management

Card ID and Visual Updates

Card Types and Features

Card Types

Supported Mobile Wallets

Card Features Control

Velocity Limits and Controls

Authorization Management

Card Product Operations

Credit Card Product Operations

Credit Account Operations

Acquire Card Operations

Client Operations

Client Address Operations

Client Classification Operations

Client Identifier Operations

Custom Operations

DataTable Operations

FX Pay Operations

Global Configuration Operations

Payment Operations

Recipient Operations

Transaction Operations

Transfer Operations

User Operations

Loan Operations

Card Operations

Note Operations

Notification Operations

Report Operations

Documentation

API Documentation

Quick Links

Type Safety & Validation

Supported Payment Rails

Payment Statuses

Validation Features

Error Handling

SdkError Structure

Basic Error Handling

Classification-Based Handling

REST Error Example

GraphQL Error Example

Type Guards

Packages