System endpoints API

This page lists the 28 endpoints that are not part of a business module: the 7 routes that create_app declares in src/cluster_erp/server/app.py, the 6 signup routes, and the 15 operator console routes. Signup and operator console routes exist only when multi_tenant is on (src/cluster_erp/server/app.py:1440-1457). They are described here at mechanism level only.

Group facts¶

Application routes¶

create_app declares these routes directly with @app.get. Health and readiness answer without a credential; the module list, metadata, and switches require a signed-in user. The readiness contract is described in Security.txt and readiness.

Static web app mounts¶

When the webapp folder exists, create_app mounts it twice: /app/v serves files under a stamp segment, and /app serves the same files with Cache-Control: no-cache and index.html for the root (src/cluster_erp/server/app.py:1634-1645). The web app is described in Web app overview.

Signup endpoints¶

The public self-service signup flow: an availability probe, the signup request, the verification of the mailed link, a resend, a cancel, and a status poll. Requests that create work are rate-limited per client, and the poll and resend calls carry the signup token in the body, never in the URL (src/cluster_erp/server/routes/signup.py:102-112). The flow is explained in Signup.

Operator console endpoints¶

The operator console API under /api/v1/vendor: operator sign-in, the operator's own record, console metadata, the overview, tenants, the minimised fleet view, signups, the operator action log, membership changes, seed refresh, and tenant backups. Every route except sign-in requires an operator token; operator accounts and tokens are separate from tenant users. The console is explained in Operator console.

Error codes¶

Error codes raised in src/cluster_erp/server/routes/signup.py, src/cluster_erp/server/routes/vendor.py, and the signup service src/cluster_erp/server/signup.py, found by the syntax-tree scan described on Errors.

Related pages¶

• API reference
• Signup
• Operator console
• Multi-tenancy
• Request pipeline and middleware
• Shared server routes API

Verified against commit 92f8051 on 2026-11-13.