10. Endpoint index
| # | Method | Path | Auth | Purpose |
|---|---|---|---|---|
| 1 | GET | /api/v1/health | None | Liveness (JSON or HTML) |
| 2 | GET | /api/v1/ready | None | Database and configuration readiness |
| 3 | GET | /api/v1/openapi | None | OpenAPI 3.1 document |
| 4 | POST | /api/v1/contact | Origin check | Submit a public contact inquiry |
| 5 | GET, POST, PATCH, PUT, DELETE | /api/v1/auth/{operation} | Better Auth | Sign-up, sign-in, sessions, 2FA, passkeys, password reset |
| 6 | GET | /api/v1/{resource} | Session and tenant | List records (52 resources) |
| 7 | POST | /api/v1/{resource} | Session, tenant, Origin | Create record (9 resources) |
| 8 | PATCH | /api/v1/{resource} | Session, tenant, Origin | Update record (9 resources) |
| 9 | GET | /api/v1/push-subscriptions | Session | Push availability and public key |
| 10 | POST | /api/v1/push-subscriptions | Session, Origin | Save a browser push subscription |
| 11 | DELETE | /api/v1/push-subscriptions | Session, Origin | Remove a push subscription |
| 12 | GET | /api/v1/finance-applications | Session, tenant | List finance applications |
| 13 | POST | /api/v1/finance-applications | Session, tenant, Idempotency-Key | Submit a finance application |
| 14 | POST | /api/v1/finance-applications/{applicationId}/transition | Session, tenant, Idempotency-Key | Non-committee lifecycle transition |
| 15 | POST | /api/v1/finance-applications/{applicationId}/decision | Session, tenant, MFA, fresh, Idempotency-Key | Committee decision |
| 16 | GET | /api/v1/financing-cases | Session, tenant | List financing cases |
| 17 | POST | /api/v1/financing-cases | Session, tenant, MFA, fresh, Idempotency-Key | Create a case from an approved application |
| 18 | POST | /api/v1/financing-cases/{financingCaseId}/transition | Session, tenant, Idempotency-Key (MFA and fresh for high-risk targets) | Lifecycle transition |
| 19 | POST | /api/v1/financing-cases/{financingCaseId}/agreements | Session, tenant, Idempotency-Key | Record an executed agreement |
| 20 | POST | /api/v1/finance/transactions | Session, tenant, MFA, fresh | Create a transaction draft (pending approval) |
| 21 | POST | /api/v1/finance/transactions/{transactionId}/approve | Session, tenant, MFA, fresh | Approve a transaction |
| 22 | POST | /api/v1/finance/transactions/{transactionId}/reject | Session, tenant, MFA, fresh | Reject a transaction |
| 23 | POST | /api/v1/finance/transactions/{transactionId}/reversal | Session, tenant, MFA, fresh | Request a reversal |
| 24 | POST | /api/v1/finance/transactions/{transactionId}/refund | Session, tenant, MFA, fresh | Request a refund |
| 25 | POST | /api/v1/reconciliation/sync | Session, tenant, fresh | Queue a settlement reconciliation run |
| 26 | GET | /api/v1/reporting/jobs | Session, MFA if tenant policy | List report export jobs |
| 27 | POST | /api/v1/reporting/jobs | Session, MFA, Origin | Schedule a report export |
| 28 | GET | /api/v1/reporting/jobs/{jobId}/download | Session, MFA if tenant policy | Short-lived download URL |
| 29 | POST | /api/v1/marketplace/applications/{applicationId}/decision | Platform Super Administrator, MFA, fresh | Accept for review or decline a public request |
| 30 | POST | /api/v1/webhooks/{provider} | Provider signature | Accept a provider webhook |
Rows 6 to 8 cover the generic resource route. Row 5 covers Better Auth.