Malaleem API

Building a contactless reader

Malaleem phones and watches emulate a card (host card emulation) under the application ID `F04D414C45454D41`. To read one, send `SELECT` by name (`00 A4 04 00 08 F04D414C45454D41 00`); the device answers with a Pay Token followed by status `90 00`. Pass that payload to `POST /payments/qr` with `method=nfc`. A tag that does not answer the SELECT is a plain card: read its UID and use `POST /payments/nfc` (paying the owner) or `POST /payments/card-charge` (charging the owner). USB RFID readers that type the UID like a keyboard work in the web POS at /merchant/pos/nfc.