Dashboard analytics, menu management, recycle bin, file management, system settings, and health checks.
The System API covers platform-level operations including dashboard analytics, dynamic menu management, soft-delete recycle bin, file uploads, system settings, and infrastructure health checks.
Dashboard Analytics
The dashboard endpoints provide real-time KPI summaries, login activity trends, security event monitoring, and audit event distribution. All data is tenant-scoped based on the authenticated admin's context.
Method
Endpoint
Description
Auth
GET
/api/v1/dashboard/summary
Get KPI summary with admin/user/tenant counts, today's logins, and storage usage.
🔒 Required
GET
/api/v1/dashboard/login-activity
Get login activity over time (successful vs failed logins per day).
🔒 Required
GET
/api/v1/dashboard/recent-changes
Get recent entity changes across the system (creates, updates, deletes).
🔒 Required
GET
/api/v1/dashboard/event-distribution
Get audit event type distribution for pie/bar charts.
🔒 Required
GET
/api/v1/dashboard/security-events
Get security events including brute-force attempts, locked accounts, and blocked IPs.
🔒 Required
GET
/api/v1/dashboard/top-blocked-ips
Get the top blocked IP addresses with attempt counts.
List soft-deleted entities with type, name, deleted date, and restore eligibility.
🔒 Required
POST
/api/v1/recycle-bin/{id}/restore
Restore a soft-deleted entity back to active state.
🔒 Required
DELETE
/api/v1/recycle-bin/{id}
Permanently delete an entity from the recycle bin (irreversible).
🔒 Required
GET /recycle-bin — Deleted ItemsJSON
{"items":[{"id":"entity-uuid","entityType":"Admin","displayName":"John Doe (john@acme.com)","deletedBy":"SuperAdmin","deletedAt":"2026-02-19T14:30:00Z","canRestore":true}],"totalCount":5}
File Management
Method
Endpoint
Description
Auth
POST
/api/v1/files/upload
Upload a file (image, document). Returns file metadata with access URL.
🔒 Required
GET
/api/v1/files/{id}
Download or stream a file by ID.
🔒 Required
DELETE
/api/v1/files/{id}
Delete an uploaded file from storage.
🔒 Required
Constraint
Value
Max file size
10 MB (configurable)
Max image dimensions
4096 x 4096 px
Allowed image types
jpg, jpeg, png, gif, webp, svg
Allowed document types
pdf, doc, docx, xls, xlsx, csv
Avatar max size
2 MB
Tenant logo max size
5 MB
Storage providers
Local, Azure Blob, AWS S3, MinIO
System Settings
Method
Endpoint
Description
Auth
GET
/api/v1/settings
Get global system settings (email config, security policies, feature flags).
🔒 Required
PUT
/api/v1/settings
Update system settings. Changes take effect immediately.
🔒 Required
POST
/api/v1/settings/reset
Reset all settings to factory defaults.
🔒 Required
System Health & Diagnostic Probes
Method
Endpoint
Description
Auth
GET
/health
Service liveness probe returning system operational status and timestamp.