API Architecture#

The backend is powered by Fastify, ensuring extreme performance and low overhead. Routes are strictly compartmentalized to handle distinct domains of the application.

Internal Settings: Routes under /api/servers/[id]/* handle all dashboard configuration. These are protected by strict BOLA (Broken Object Level Authorization) checks ensuring you actually own the server you are trying to modify.

Public Profiles: Routes under /api/public/profile/* fetch user economy profiles. These paths are rigorously protected against Path Injection (directory traversal) attacks using URL encoding and sanitization.