Deployment and Auth Architecture were moved off the
public docs site and are served only through this authenticated
endpoint — GET /portal/docs/{id}
on the API, gated by the same portal session as Swagger. Everything
else (API Reference, Data Model, Pricing, Licensing, API Tiers,
ArcGIS Integration) stays public at the docs site.
Every card below maps to a real scope enforced on a real route in this
codebase (app/core/scopes.py) — nothing here is a
marketing placeholder for infrastructure that doesn't exist. Cards marked
RESERVED are declared scopes with no endpoint
wired to them yet, kept visible on purpose so the catalog's shape doesn't need to
change when they ship.
This dashboard is only as real as the API it's pointed at. Sign in to
get a token; if a live backend is reachable at the API base URL below, everything on
this page — role, scopes, and usage — is read straight from that server via
GET /usage/me, not sample data.
POST /auth/token (or, with no API base URL set,
a demo token that unlocks this page's layout without hitting a server).
The default API base points at a real free-tier deployment, which spins
down after 15 minutes idle — the first request after a while can take
30–60 seconds to wake it up; that's a cold start, not an error.
Pick an operation, fill parameters, run it. With a signed-in token and a
reachable API base URL, this fires a real authenticated request and shows the real
response, latency, and the billing code/cost your call was metered under — read from
the same BILLING_CODE table the server enforces, not a
guess.