API Reference
Versioned HTTP APIs under /api/v1.
Authentication
Obtain tokens via /api/v1/auth/login. Send Authorization: Bearer <accessToken> and X-Company-Id for company-scoped routes. Mutating requests also require CSRF.
Major groups
- Auth, users, companies
- Parties, items, masters
- Documents, payments, stock
- Reports, export/import, audit
See docs/API.md in the repository for the exhaustive handbook.