Zero-Touch Sidecar Architecture

Transparent FinOps
TLS Proxy for FinTech APIs

Mintry Fabric is a transparent, zero-touch Man-in-the-Middle (MITM) proxy that intercepts, encrypts, and caches expensive third-party financial API calls (e.g., Credit Bureaus, KYC, AML checks) at the network layer, dramatically reducing operational expenditures with zero code changes.

docker-compose.yml

environment:
  - HTTP_PROXY=http://mintry-sidecar:8080
  - HTTPS_PROXY=http://mintry-sidecar:8080
  - MINTRY_SQLCIPHER_KEY=your_super_secret_aes_key

mintry — proxy_monitor

Zero code changes to prevent five-figure API waste.

// 01 — The Problem

Vendor-Sprawl

"KYC and credit bureau checks are critical—but running redundant queries against third-party endpoints will drain your runway overnight."

Modern FinTech microservices query expensive third-party APIs constantly: Credit Bureaus, KYC, and AML endpoints. Without centralized, transparent caching, backend applications frequently issue duplicate queries, leading to astronomical and redundant API invoices.

Mintry Fabric intercepts these calls at the network layer. It keeps sensitive data encrypted using SQLCipher, enforces TTL rules, and incorporates a graceful failsafe circuit breaker if the database or disk locks.

Feature	Standard Billing	Mintry Fabric
Caching & Latency	Always call vendor (High latency)	Transparent caching (<3ms, zero-touch)
Data Security	Unencrypted logs & payloads	SQLCipher (AES-256 encrypted WAL)
Resilience	App offline on vendor failure	Circuit Breaker fallback
Policy Control	Hardcoded endpoint rules	Hot-reloadable YAML TTL policies

// 02 — The Logic Fabric

The Logic Fabric

The Fabric is not a wrapper. It is not middleware you configure. It is a network-layer presence that watches everything — silently, instantly, without asking your agents to change their behavior.

Selective TLS Interception

Dynamically terminates and inspects outbound vendor TLS traffic. Decrypts, matches canonical hashes, and re-encrypts entirely in memory.

Zero-Latency

SQLCipher at Rest

All cached payloads and telemetry data are protected by AES-256-GCM encryption in a local SQLite Write-Ahead Log.

AES-256-GCM

Failsafe Circuit Breaker

Engineered for zero downtime. If the cache layer experiences extreme load or disk lock, traffic gracefully falls back to a transparent TCP tunnel.

Failsafe Fallback

Dynamic Routing Policies

Define TTL (Time-To-Live) cache invalidation rules per vendor endpoint using hot-reloadable YAML configurations.

experian-credit

TTL: 24hCACHED

transunion-kyc

TTL: 12hCACHED

aml-screening

TTL: 48hCACHED

bank-verification

TTL: 0s (Skip)BYPASS

identity-match

TTL: 30dCACHED

Hot-Reloadable YAML

Telemetry Command Center

A stunning Next.js command center tracking ZAR capital saved, real-time cache hits via WebSockets, and system memory allocations.

Telemetry Dashboard

query_profiler.sql

// fabric.cache snapshot

SELECT endpoint, cache_status, cost_saved_zar, response_time_ms

FROM mintry_cache_log

WHERE ts > NOW() - INTERVAL '1 hour'

ORDER BY cost_saved_zar DESC;

→ 84 hits · 0.2ms

Telemetry Ledger

// 03 — Zero-Touch Policy

Zero code changes.
Hot-reloadable
policies.

Mintry Fabric runs as a network sidecar proxy. It intercepts HTTP/HTTPS requests transparently. You don't write a single line of SDK code or redeploy your applications to modify telemetry or routing behavior.

Define TTL cache invalidation and security policies in a simple mintry.yaml configuration file. The proxy hot-reloads policies on the fly without dropping connections.

mintry.yaml

# mintry.yaml - Hot-reloadable routing policies
version: "1.0"

routing:
  - endpoint: "api.experian.com/v1/credit-report"
    policy: cache
    ttl: 24h       # Cache credit reports for 24 hours
    encrypt: true   # Store in AES-256 SQLCipher WAL
    circuit_breaker:
      max_latency: 5000ms
      fail_action: pass_through

  - endpoint: "api.identity-check.net/v2/kyc"
    policy: cache
    ttl: 12h       # Cache KYC checks for 12 hours
    encrypt: true

  - endpoint: "api.bank-verify.co.za/v1/account"
    policy: pass_through # Never cache banking transactions
    encrypt: false

// 04 — Language-Agnostic

One Fabric. / Any Language.

Whether you build in Python, Node.js, Java, or Go — Mintry's sidecar proxy architecture transparently intercepts and caches expensive third-party financial API calls for your microservices. One deployment. Total coverage.

Python

Node.js

Java

Kotlin

Swift

Sidecar Proxy Architecture — No SDK lock-in, no vendor coupling. Deploy alongside any runtime.

Transparent FinOps TLS Proxy for FinTech APIs