| Method | Path | Description |
|---|---|---|
| POST | /events | Event ingestion (gateway → cloud) |
| GET | /commands?gateway_id=X | Command polling (gateway ← cloud) |
| POST | /commands/{id}/ack | Command acknowledgment |
| Method | Path | Description |
|---|---|---|
| GET | /admin/devices | List devices (optional ?state=) |
| GET | /admin/devices/{id} | Device detail + fingerprints |
| GET | /admin/sessions | List sessions |
| GET | /admin/events | List events (optional ?type=) |
| GET | /admin/dns | DNS events |
| GET | /admin/fingerprints | Fingerprint observations |
| GET | /health | Health check |