API Reference

Every route mounted in server.js, grouped by resource. Auth column reflects what's actually enforced in each route file today — authenticateToken (JWT), a specific role list, the shared X-API-Key scheme, or none.