MEGAINFRA-WEBAPP/docs/setup/api-route-inventory.md

API route inventory

Generated from this checkout on 5 October 2026 (Africa/Johannesburg).

[id], [poNumber], etc. are path parameters. [...filename] is a catch-all. The proxy category below is from src/lib/auth/proxy-path.ts for AUTH_MODE=users; route handlers can require additional credentials, site permissions, or an Origin header. PIN mode skips the proxy login check. A machine category means the proxy defers authentication to the handler, usually x-ingest-secret.

See the connection guide for authentication and tested examples. This inventory replaces assumptions based on older route documentation.

Methods	Route	Proxy category	Source
PATCH, DELETE	/api/admin/users/[id]	admin	route.ts
GET, POST	/api/admin/users	manager	route.ts
POST	/api/agent/actions/[id]/apply	admin	route.ts
POST	/api/agent/actions/[id]/reject	admin	route.ts
GET	/api/agent/actions/[id]	admin	route.ts
POST	/api/agent/actions/[id]/undo	admin	route.ts
PATCH	/api/ask/change-requests/[id]	admin	route.ts
GET	/api/ask/change-requests	admin	route.ts
DELETE	/api/ask/memories/[id]	admin	route.ts
GET, POST	/api/ask/memories	admin	route.ts
GET	/api/ask/messages/[id]/pdf	admin	route.ts
GET	/api/ask/users	admin	route.ts
POST	/api/auth/change-password	public	route.ts
POST	/api/auth/login	public	route.ts
POST	/api/auth/logout	public	route.ts
POST	/api/chat/attachments	admin	route.ts
POST	/api/chat	admin	route.ts
GET, PATCH, DELETE	/api/chat/threads/[id]	admin	route.ts
GET, POST	/api/chat/threads	admin	route.ts
GET	/api/clock/employee-lookup	clock	route.ts
GET	/api/clock/employee-search	clock	route.ts
POST	/api/clock/events/[id]/correct	clock	route.ts
POST	/api/clock/scan	clock	route.ts
POST	/api/clock/vehicle-lookup	clock	route.ts
POST	/api/clock/vehicle-scan	clock	route.ts
GET	/api/dashboard-attention	dashboard	route.ts
POST	/api/data-import-batches/[id]/retry	clock	route.ts
GET	/api/data-import-batches/[id]/status	clock	route.ts
POST	/api/delivery-notes/[id]/assign-po	clock	route.ts
POST	/api/delivery-notes/[id]/ocr-result	admin	route.ts
GET	/api/delivery-notes/[id]/slip	machine	route.ts
POST	/api/delivery-notes/upload	clock	route.ts
POST	/api/dn-batches/[id]/assembly	clock	route.ts
POST	/api/dn-batches/[id]/dismiss	clock	route.ts
POST	/api/dn-batches/[id]/notes/[noteId]/correct-receipt	clock	route.ts
POST	/api/dn-batches/[id]/notes/[noteId]/dismiss	clock	route.ts
POST	/api/dn-batches/[id]/notes/[noteId]/matching	clock	route.ts
POST	/api/dn-batches/[id]/notes/[noteId]/post-line	clock	route.ts
POST	/api/dn-batches/[id]/notes/[noteId]/post	clock	route.ts
GET, POST	/api/dn-batches/[id]/notes/[noteId]/processing-preview	clock	route.ts
POST	/api/dn-batches/[id]/notes/[noteId]/resolve-entities	clock	route.ts
POST	/api/dn-batches/[id]/notes/[noteId]/resolve-item	clock	route.ts
PATCH	/api/dn-batches/[id]/notes/[noteId]	clock	route.ts
POST	/api/dn-batches/[id]/pages/[n]/dismiss	clock	route.ts
GET	/api/dn-batches/[id]/pages/[n]	clock	route.ts
POST	/api/dn-batches/[id]/rerun	clock	route.ts
POST	/api/dn-batches/tick	machine	route.ts
POST	/api/fuel-logs/import	clock	route.ts
GET	/api/health	public	route.ts
GET	/api/pb-files/[collection]/[recordId]/[...filename]	clock	route.ts
DELETE	/api/plant-hours/[id]	clock	route.ts
GET	/api/plant-hours/exception-report/[sheetId]	clock	route.ts
POST	/api/plant-hours/import	clock	route.ts
GET	/api/plant-hours/template	clock	route.ts
GET	/api/purchase-orders/[id]/delivery-reconciliation	machine	route.ts
GET	/api/purchase-orders/[id]/document	clock	route.ts
PATCH, DELETE	/api/purchase-orders/[id]/items/[itemId]	clock	route.ts
POST	/api/purchase-orders/[id]/items	clock	route.ts
GET	/api/purchase-orders/[id]/pages/[n]	clock	route.ts
POST	/api/purchase-orders/[id]/retry	clock	route.ts
GET	/api/purchase-orders/[id]/status	clock	route.ts
POST	/api/purchase-orders/[id]/supplier	clock	route.ts
GET	/api/purchase-orders/by-number/[poNumber]/items	machine	route.ts
POST	/api/purchase-orders/ingest	machine	route.ts
POST	/api/purchase-orders/process-batch	machine	route.ts
POST	/api/purchase-orders/upload	clock	route.ts
POST	/api/records/[collection]/[id]/verify	admin	route.ts
POST	/api/sites/[id]/fixed-costs	clock	route.ts
PATCH	/api/sites/[id]	clock	route.ts
POST	/api/sites	clock	route.ts
PATCH	/api/suppliers/[id]	clock	route.ts
POST	/api/suppliers	clock	route.ts
POST	/api/timesheets/import	clock	route.ts
POST, DELETE	/api/vehicles/[id]/attention-dismiss	clock	route.ts
POST	/api/vehicles/[id]/merge	clock	route.ts
PATCH, DELETE	/api/vehicles/[id]	clock	route.ts
POST	/api/vehicles/import-summary	clock	route.ts
POST	/api/vehicles	clock	route.ts

78 route files. Next.js may also supply HEAD/OPTIONS automatically; the table lists explicitly exported methods.