Unified Ecosystem Service Hub & Architecture Map

QOSMAS SuperApp Service Hub

Top-down architectural map of all client portals, mobile super-apps, microservices, vendor consoles, and isolated databases with live access links, communication protocols, and default credentials.

๐ŸŒ
Connected Host: Detecting...
All service access links dynamically target this host. 5-digit conflict-free ports (21000 - 25999).
Port Scope: 21080 - 25009
๐Ÿ“ Interactive System Communication Canvas

Full-mesh top-down architecture map with live connecting lines and animated packet flows. Hover over any node to highlight connections; click to jump to credentials.

๐ŸŽฏ Flow Filter:
46 Active Lines โ€ข Animated
Component Name
:22000
Description of communication role and protocols.
HTTPS / WSS (REST / JSON)
Eureka lb:// Load-Balanced Dispatch
OAuth2 / OIDC Token Verification
Vendor Engines (Numscript / BPMN / PSP)
Isolated JDBC Database Wire (:3306 / :5432)
Kafka Bus & CouchDB Offline Sync
Ecosystem Directory & Access Control Map

Click launch to access any portal or console with dynamically detected host IP. One-click copy default credentials.

๐Ÿ›ก๏ธ
Quantivo Super Admin
Client Portal
Port :21080

Master administration portal: merchant approvals, transaction management, fee configurations, multi-currency wallets, and KYC audit logs.

๐Ÿ”— How It Communicates:
Connects directly to MariaDB (:25008) via internal Docker bridge. Calls API Gateway (:22000) via REST for microservice state.
Default Credentials Click to copy
Username: admin
Password: password
๐Ÿ—„๏ธ
phpMyAdmin Visualizer
Database GUI
Port :21083

Web-based visual relational database inspector for PaySecure MariaDB: inspect tables, run ad-hoc SQL queries, and monitor connections.

๐Ÿ”— How It Communicates:
Communicates over port 3306 with paysecure_db (:25008) via MySQL wire protocol.
Default Credentials Click to copy
Username: paysecure
Password: paysecure_local
๐Ÿช
Merchant Web Portal
Client Portal
Port :21084

Storefront management dashboard: merchant self-onboarding, dynamic till QR downloads, product catalog, payout bank accounts, and daily reconciliations.

๐Ÿ”— How It Communicates:
Single Page App served via Nginx. Dispatches authenticated REST requests to API Gateway (:22000/api/v1/merchants).
Default Credentials Demo Merchant
Email: merchant@dar-biashara.tz
Password: Merchant!2026
๐Ÿ’ป
Developer Portal & Sandbox
Client Portal
Port :21085

Interactive developer hub: Open Banking API documentation, sandbox API key generator, webhook simulator, and mini-app manifest submission workbench.

๐Ÿ”— How It Communicates:
Calls Developer Service (:22003) and App Registry (:22002) through API Gateway (:22000).
Default Credentials Developer Sandbox
Email: developer@sandbox.quantivo.africa
Password: DevSandbox!2026
๐ŸŽฎ
Ecosystem Simulator
Test Engine
Port :21087

Comprehensive test runner: simulates M-Pesa Daraja C2B/B2C callbacks, USSD menu navigation sessions, SoftPOS NFC taps, and agent float transfers.

๐Ÿ”— How It Communicates:
Dispatches mock webhooks to Integration Service (:22005) and sends USSD triggers to USSD Gateway (:22010).
Access Method
Authentication: Open Sandbox Access
๐Ÿ‘ค
Customer Super-App
Mobile Web
Port :8092

Retail mobile banking and digital wallet: instant P2P transfers, savings goals, overdraft reserve facilities, utility bills, and mini-apps marketplace.

๐Ÿ”— How It Communicates:
Communicates with API Gateway (:22000) for wallet balance, and syncs offline state via CouchDB (:25009).
Demo Wallet Account
Phone: +255784112233
PIN: 5678
๐Ÿ›๏ธ
Merchant POS App
Mobile Web
Port :8091

Merchant Point-of-Sale mobile app: dynamic till QR codes, contactless NFC tap-to-phone SoftPOS, inventory items, and auto-settlement sweeps.

๐Ÿ”— How It Communicates:
Communicates with API Gateway (:22000) and Merchant Service (:22006) for till checkout.
Demo Merchant Till
Till Number: TIL-28491
PIN: 1234
๐Ÿฆ
Wakala Agent App
Mobile Web
Port :8093

Agency banking terminal: Cash-In remittances, Cash-Out OTP validations, liquidity float top-ups, and daily commission audit ledgers.

๐Ÿ”— How It Communicates:
Communicates through API Gateway (:22000) to Agency Service (:22001) for real-time float updates.
Demo Wakala Agent
Agent Code: WAK-9042
PIN: 9988
โšก
Ecosystem API Gateway
Core Gateway
Port :22000

High-performance reactive ingress gateway: JWT authentication, rate limiting, and dynamic load-balanced dispatch to all microservices.

๐Ÿ”— How It Communicates:
Validates JWTs against Keycloak (:22053). Resolves service URLs dynamically via Eureka Discovery (:22051).
Gateway Health & Specs
Endpoint: /actuator/health
๐Ÿ”
Keycloak IAM Admin
Identity Provider
Port :22053

Enterprise Identity and Access Management: OAuth 2.0, OpenID Connect 1.0, single sign-on (SSO), and RBAC user permissions for the entire ecosystem.

๐Ÿ”— How It Communicates:
Persists realm & user data to Keycloak PostgreSQL (:25002). Supplies public JWKS keys to API Gateway (:22000).
Master Admin Credentials
Username: admin
Password: admin_password_2026
๐Ÿ”ญ
Eureka Service Discovery
Service Mesh
Port :22051

Real-time service registry and heartbeat coordinator: tracks active container replicas and powers client-side load balancing for microservices.

๐Ÿ”— How It Communicates:
All microservices (:22001 - :22014) register heartbeats every 30s. Queried continuously by API Gateway (:22000).
Console Access
Auth Mode: Public Discovery Dashboard
โš™๏ธ
Spring Cloud Config Server
Configuration
Port :22050

Centralized external configuration service: serves Git/YAML configuration profiles and canonical port registries to all microservices on bootstrap.

๐Ÿ”— How It Communicates:
Reads from config-repo/ports-registry.yml. Queried by microservices upon container initialization.
Health Endpoint
Path: /actuator/health
๐ŸŒ
HashiCorp Consul Mesh
Service Mesh
Port :22052

Distributed key-value store, health monitoring, and DNS coordinator: provides zero-trust dynamic configuration and failover routing.

๐Ÿ”— How It Communicates:
Listens for HTTP UI queries on :22052 and DNS queries on :22054 UDP.
UI Access
Auth Mode: Consul Web UI
๐Ÿ“‹
Flowable BPMN 2.0 UI
Workflow Engine
Port :23005

Business Process Automation: Process modeler, human task management, automated KYC escalations, and complex multi-signoff loan origination flows.

๐Ÿ”— How It Communicates:
Invoked by Payment Service (:22007) and Settlement (:22009) for long-running financial state machines.
Default Credentials
Username: admin
Password: test
๐Ÿ“’
Formance Ledger Console
Financial Ledger
Port :23007

Zero-sum double-entry programmable ledger visualizer: inspect asset accounts, Numscript transactions, currency balances, and immutable audit logs.

๐Ÿ”— How It Communicates:
Connects to Formance Core (:23006). Invoked by Pilot Server (:21090) & Settlement (:22009).
Ledger Configuration
Ledger Name: quantivo-main
๐Ÿ”€
Hyperswitch Control Center
Payment Routing
Port :23009

Universal payment orchestration engine: dynamic least-cost routing rules across multiple payment service providers (PSPs), cards, and mobile money rails.

๐Ÿ”— How It Communicates:
UI on :23009 connects to Hyperswitch Core (:23008). Dispatches transactions to external payment acquirers.
Control Center Credentials
Email: admin@hyperswitch.io
Password: admin
๐Ÿงพ
Kill Bill Kaui Console
Subscription Billing
Port :23011

Subscription billing and invoicing platform: catalog plans, recurring payments, overdue dunning workflows, and merchant fee management.

๐Ÿ”— How It Communicates:
Kaui Web UI connects to Kill Bill Server (:23010). Interacts with Billing Service (:22013).
Default Credentials
Username: admin
Password: password
๐Ÿ›๏ธ
Apache Fineract Core Banking
Core Banking
Port :23004

Open-source core banking platform: client demographics, amortized credit products, savings accounts, and teller cash float reconciliation.

๐Ÿ”— How It Communicates:
Exposes REST API to Account Service (:22011) and Agency Service (:22001).
Default Credentials
Username: mifos
Password: password
โš–๏ธ
Drools Rules Workbench
BRMS
Port :23002

Business Rules Management: dynamic Decision Tables, AML transaction velocity checks, micro-lending risk scoring, and real-time fraud rule evaluation.

๐Ÿ”— How It Communicates:
Evaluates rules dispatched from Rules Service (:22008) and Payment Service (:22007).
Default Credentials
Username: admin
Password: admin
๐Ÿ›‹๏ธ
Apache CouchDB Fauxton
Offline NoSQL
Port :25009

Offline-first document database: powers peer-to-peer mobile wallet synchronization, local transaction queues, and conflict-free wallet replication.

๐Ÿ”— How It Communicates:
Synced with Flutter mobile apps over HTTP JSON replication protocols. Fauxton web UI on /_utils/.
Admin Credentials
Username: admin
Password: couchdb_password_2026
๐Ÿ˜
Payment PostgreSQL 16
Database
Port :25001

High-concurrency relational store: payment transactions, idempotency logs, merchant fee accounts, and settlement records.

๐Ÿ”— How It Communicates:
Dedicated to Payment Service (:22007), Merchant (:22006), and Settlement (:22009) via JDBC.
Database Credentials
Database: quantivo_payments
User / Pass: postgres / postgres_secure_2026
JDBC Wire Protocol (:25001)
๐Ÿ“Š
APISIX Gateway Dashboard
Observability
Port :24008

High-throughput Cloud-Native API Gateway dashboard: dynamic SSL certificates, route matching rules, WAF security, and rate limiting metrics.

๐Ÿ”— How It Communicates:
Configures APISIX Edge Proxy (:24007) for external high-concurrency mobile app traffic.
Dashboard Login
Username: admin
Password: admin
โณ
Temporal Workflow UI
Orchestration
Port :24010

Durable execution state machine dashboard: financial saga visualizer, distributed transaction rollbacks, and retry execution histories.

๐Ÿ”— How It Communicates:
Visualizes workflow executions dispatched to Temporal Server (:24009) from core financial microservices.
Web Access
Auth Mode: Open Telemetry Dashboard
๐Ÿ”
Jaeger Distributed Tracing
Observability
Port :24017

End-to-end transaction latency visualizer: trace user requests as they hop across the API Gateway, microservices, vendor engines, and databases.

๐Ÿ”— How It Communicates:
Collects OpenTelemetry spans from all Java, Node.js, and Go services on gRPC port :24016.
UI Access
Auth Mode: Open Tracing UI
๐Ÿ“˜ Architectural Request Lifecycle & Protocol Breakdown

1. Client Requests & Authentication

Clients (Customer, Merchant, Wakala, Web Portals) send HTTPS/WSS requests to API Gateway (:22000). Requests carry JWT Bearer tokens issued and validated against Keycloak IAM (:22053).

2. Dynamic Discovery & Dispatch

The API Gateway evaluates routes dynamically via Netflix Eureka (:22051), routing requests to internal microservices (:22001 - :22014) using load-balanced lb:// URI schemes.

3. Core Ledger & Specialized Logic

Financial transactions execute Numscript scripts against Formance Ledger (:23006) for zero-sum accounting. Complex workflows invoke Flowable BPMN (:23005) and AML rules invoke Drools (:23002).

4. Persistence & Event Stream

Domain microservices write exclusively to their isolated database instances on PostgreSQL 16 (:25001 - :25006) or MariaDB (:25008), while broadcasting domain events to Kafka (:24003).