Authentication
All protected endpoints require a Bearer JWT token. Get yours via POST /api/v1/auth/login-direct with your username and password.
Response Format
Every response follows a standard envelope: { success, message, data, pagination? } — consistent across all 210+ endpoints.
Multi-Tenancy
Data is isolated per tenant. Your JWT token contains a tenantId that scopes all queries to your shop automatically.
Real-time Events
Connect to GET /api/v1/sse/connect for live Server-Sent Events — stock updates, new sales, notifications, and more.