# PlatPhorm Monitor

Canonical operations control plane for PlatPhormNews infrastructure, deployments, domains, DNS, firewall/security, sandbox, AI/model operations, trace/observability, API/MCP health, protected actions, rate limits, audit events, and cross-site reliability.

Base URL: https://monitor.platphormnews.com
Version: 0.9.0
Updated: 2026-09-01T03:23:27.916Z

## Inventory
- Projects: 20 (live)
- Deployments: 20 (live)
- Domains: 20 (live)
- Incidents persistence: unavailable

## Public Endpoints
- GET /api/v1/overview
- GET /api/v1/dashboard
- GET /api/v1/settings/status
- GET /api/v1/projects
- GET /api/v1/deployments
- GET /api/v1/domains
- GET /api/v1/analytics
- GET /api/v1/firewall
- GET /api/v1/notifications
- GET /api/v1/system-health
- GET /api/v1/incidents
- GET /api/v1/status
- GET /api/v1/database/status
- GET /api/v1/database/models
- GET /api/v1/database/snapshots
- GET /api/v1/ja4db/status
- GET /api/v1/ja4db/summary
- GET /api/v1/sync-runs
- GET /api/v1/protected-actions
- GET /api/v1/audit
- GET /api/v1/rate-limits
- GET /api/v1/sandbox/status
- GET /api/v1/sandbox/sandboxes
- GET /api/v1/sandbox/commands
- GET /api/v1/sandbox/snapshots
- GET /api/v1/sandbox/errors
- GET /api/v1/sandbox-health
- GET /api/v1/sandboxes
- GET /api/v1/sandbox-commands
- GET /api/v1/sandbox-snapshots
- GET /api/v1/ai/status
- GET /api/v1/ai/providers
- GET /api/v1/ai/model-runs
- GET /api/v1/ai/errors
- GET /api/v1/ai/degraded
- GET /api/v1/observability/status
- GET /api/v1/observability/traces
- GET /api/v1/observability/failures
- GET /api/v1/observability/services
- GET /api/v1/observability/late-spans
- GET /api/v1/observability/orphan-spans
- GET /api/v1/security/firewall
- GET /api/v1/security/attacks
- GET /api/v1/security/bypass
- GET /api/v1/security/redaction
- GET /api/v1/security/agent-policy
- GET /api/v1/network/status
- GET /api/v1/network/sites
- GET /api/v1/network/integrations
- GET /api/v1/network/compliance
- GET /api/v1/network/discovery
- GET /api/v1/cache/status
- GET /api/v1/rate-limit/status
- GET /api/v1/network/route-compliance
- GET /api/v1/network/discovery-compliance
- GET /api/v1/network/uptime

## Operations Surfaces
- Vercel provider reads use live provider responses, persisted snapshots, stale cache, or honest degraded states.
- Sandbox monitoring checks sandbox.platphormnews.com and reports unavailable provider counts instead of fake sessions.
- AI/model monitoring reports configured/no-provider/degraded states without exposing keys, prompts, or outputs.
- Health and uptime probes emit public-safe W3C parented span lifecycles and evidence to Trace when platform auth is configured.
- Firewall/security monitoring keeps mutations protected and never exposes raw x-vercel-ja4-digest values.

## MCP
- Standard endpoint: /api/mcp
- Legacy compatibility endpoint: /mcp
- Tools: 60
- Resources: 41
- Prompts: 20

## Auth
- Protected platform actions require PLATPHORM_API_KEY.
- Accepted headers: Authorization Bearer or X-PlatPhorm-API-Key.
- The Vercel provider credential is upstream-only and is never public platform auth.

## Public/Protected Boundary
Web dashboard, public-safe discovery, browser-based operations, trusted-domain discovery, standard route compliance, Vercel metadata capture, trace inspection, and agentic workflow discovery are intentionally supported for public read-only debugging and operator workflows. Mutating, administrative, ingestion, replay, fork, remediation, deployment, sync, test-triggering, reporting, and write actions require PLATPHORM_API_KEY.