Links and API

This page collects the key URLs for the deployed system (docs + API) and a lightweight API reference.

Docs

• Docs (canonical): https://docs.nwatch.app
• Privacy policy: https://nwatch.app/au/privacy
• Terms of Service: https://nwatch.app/au/terms
• Account deletion: https://nwatch.app/au/account-deletion
• Security: https://nwatch.app/au/security
• Support & FAQ: https://nwatch.app/au/support

Admin dashboard

• Manager portal (Firebase identity): https://portal.nwatch.app
• Super-admin login (Cloudflare Zero Trust): https://admin.nwatch.app

API (Cloudflare Worker)

• API base: https://api.nwatch.app
• Health check: GET /health

Notes:

• The API is separate from the docs site. The Worker root / returns JSON (it is not a website).
• Authenticated endpoints require Authorization: Bearer <Firebase ID token>.

Endpoints (Worker)

Public:

• GET / (service info)
• GET /health

Authenticated (member):

• POST /v1/registerDevice
• POST /v1/registerCrypto
• POST /v1/joinGroup
• POST /v1/triggerIncident
• POST /v1/deleteAccount
• GET /v1/me
• GET /v1/me/membership
• GET /v1/groups/:groupId/keys
• GET /v1/incidents/:groupId/:incidentId/envelope
• GET /v1/groups/:groupId/activeIncident

Authenticated (ordinary manager portal, Firebase ID token):

• GET /v1/portal/me
• POST /v1/portal/checkout
• POST /v1/portal/groups
• GET /v1/portal/groups/:groupId
• POST /v1/portal/groups/:groupId/invites
• POST /v1/portal/groups/:groupId/revokeInvite
• POST /v1/portal/groups/:groupId/members/:uid/status
• POST /v1/portal/groups/:groupId/members/:uid/role
• POST /v1/portal/groups/:groupId/testAlert
• POST /v1/portal/groups/:groupId/status
• POST /v1/portal/groups/:groupId/archive
• POST /v1/portal/groups/:groupId/seats
• GET /v1/portal/groups/:groupId/incidents/:incidentId/decrypt
• POST /v1/portal/groups/:groupId/incidents/:incidentId/resolve

Cloudflare Access administration uses separate /v1/admin/* and /v1/superadmin/* routes. Those routes are not ordinary manager-portal APIs; do not infer access from the path.

Swagger / OpenAPI

NWatch does not currently publish an OpenAPI file. The former file documented only a legacy subset and described the administrative authentication boundary incorrectly, so it was removed rather than presented as a current contract. A future generated specification must distinguish Firebase member and portal tokens from Cloudflare Access administration before it is published.