01Prepaid Hotspot
Publish a tenant-branded Wi-Fi storefront where buyers choose a package and pay without creating a customer portal account. Successful payment can issue controlled access for the permitted duration and number of devices.
- Three configurable storefront presentations
- Minutes, hours, days, weeks, months and yearly packages
- Single-device access by default with optional multi-device limits
- Reconnect using a verified M-Pesa payment reference
02PPPoE broadband
Manage named subscriber accounts for home, business and reseller-style connections. Packages and subscription records provide the commercial source of truth while RADIUS and MikroTik enforce network access.
- Tenant-scoped PPPoE account creation
- Package assignment and router association
- RADIUS authentication and interim accounting
- Renewal, suspension and service-history context
03Multi-site MikroTik networks
Operate routers across offices, towers and access sites. Direct API-SSL is suitable for safely reachable addresses; WireGuard provides a private management path for routers behind CGNAT, Starlink or mobile upstreams.
- Router inventory grouped by site
- Encrypted RouterOS credentials
- API-SSL service restricted to management addresses
- Online, offline, latency and RouterOS visibility
04M-Pesa collections
Let each ISP choose between verified tenant-owned production credentials and a managed collection application workflow. Payment callbacks are matched to tenant transactions and protected with unique callback endpoints.
- STK Push initiation and asynchronous results
- Amount and provider-reference validation
- Duplicate-resistant transaction processing
- Reconciliation status and callback audit records