v1

A scoped, audited gateway in front of FieldInsight.

Multi-tenant API gateway. Each client gets their own bearer key, their own scope, and their own per-field policy. Every request is logged. The FieldInsight master key never leaves our infrastructure.

Per-tenant scope
Every key is bound to specific FieldInsight customers and projects. The gateway injects scope server-side — clients can't override it.
Field-level policy
Read and write allowlists per tenant. Custom fields surface via a clean snake_case map — FI's raw field IDs are never exposed.
Outbound webhooks
HMAC-signed status events delivered at-least-once. Clients dedupe on X-FI-Gateway-Event-Id.