Backend serviceAuthorization requiredREST control plane
SENTINEL CONTROL PLANE
System overview
Monitor infrastructure health and recent operator activity.
API authorization required
OPERATIONS CENTER
Secure oversight.
Secure oversight.
Decisive action.
Find managed devices, inspect current state, review evidence, and perform verified administrative operations.
Every sensitive operation is audited.
Database—Persistent device records
MQTT broker—Command transport
Backend uptime—Current process
RECENT OPERATIONS
Administrative activity
Latest verified actions recorded by the console.
◎No activity loaded
Authorize the API key to load audit records.
DEVICE DIRECTORY
Find a managed child device
Search by child name or the exact registered parent number.
◇No search performed
Search results will appear here.
DURABLE RELEASE QUEUE
Track a release request
Use the request UUID returned by a device release operation to verify dispatch and acknowledgement state.
PARENT IDENTITY RECOVERY
Recovery approval queue
Review and authorize verified parent-device migration requests.
↺Queue not loaded
Authorize the API key, then refresh the recovery queue.
ACCOUNTABILITY
Administrative audit trail
A chronological record of privileged portal operations.
≡No audit records loaded
Authorize the API key to view administrative activity.
DEVICE TRUST SIGNALS
Client security events
Review bootstrap acceptance, attestation results, and reported runtime risk signals. Signals are telemetry and do not silently crash a device.
◉No security events loaded
Authorize the API key, then refresh this view.
ROUTE GOVERNANCE
Backend API inventory
Operator routes exposed through the portal and app-internal routes intentionally excluded from browser controls.
Portal controlExplicit confirmationApplication only
GET /healthPortalServer, database, and MQTT health.
GET /api/mahdi/khuje-berkoro/:termPortalSearch by child name or parent number.
GET /api/device/status/:deviceIdPortalOnline, offline, or released state.
GET /api/evidence/:deviceIdPortalPaginated evidence metadata.
GET /api/verify-release/:deviceIdPortalActive release authorization.
POST /api/admin/release/:deviceIdConfirmedAudited Device Owner release request.
GET /api/admin/release/status/:requestIdPortalRelease dispatch and acknowledgement state.
POST /api/recovery/requestsParent appCreate a server-approved recovery request.
GET /api/admin/recovery/requestsPortalAdministrative recovery approval queue.
GET /api/admin/security-eventsPortalAttestation and runtime-risk telemetry.
POST /api/admin/recovery/requests/:requestId/approveConfirmedDispatch a server-signed recovery approval.
POST /api/admin/recovery/requests/:requestId/rejectConfirmedDeny an unverified recovery request.
POST /api/admin/clear-retained/:deviceIdConfirmedClear known retained MQTT topics.
POST /api/admin/purge-device/:deviceIdConfirmedPermanently delete an inactive device's server state.
POST /api/uploadApp onlyChild evidence upload; not an operator control.
POST /api/device/heartbeatApp onlyChild heartbeat; not an operator control.
GET /api/turn-credentialsApp onlyShort-lived WebRTC credentials; never exposed here.