REST API endpoints, webhook telemetry events, authentication headers, and role-based access matrix schemas.
All API requests require an HTTP Authorization Bearer token header obtained via Firebase Auth ID Token exchange.
Verify a visitor pass token scanned by security guards at the entry gate.
Listen for real-time payment webhook events when residents complete maintenance billing payments online.