Using the API
Base URL
Development requests default to http://localhost:8000; production uses VITE_BASE_URL. Paths in this section omit the base URL.
Headers
Use multipart/form-data for uploads. Except for routes explicitly marked public, send a valid token and hold the required permission.
Permission keys
Tables list the suffix combined with the controller permission prefix. Current-user /system endpoints do not use the same class-level permission prefix and rely on their authentication behavior.
Responses
success describes the business result, while HTTP statuses still represent authentication, validation, and transport errors. See Responses and Errors.
These tables follow current route attributes in app/Http/Controllers/Admin/. Synchronize src/api/, access rules, and both documentation languages when endpoints change.