Internal documentation for the Cloudflare Workers that power Maya Wealth Group products.
Platform
How the Workers, service bindings, and product apps fit together.
Authentication
JWT actors, organisation scoping, and how clients call private APIs.
Services
What each API owns, from venue operations to training and expenses.
API reference
Interactive OpenAPI docs generated from each service's published spec.
Product sites and apps reach domain APIs through the public API gateway (API_GATEWAY_URL). Each private Worker exposes:
GET /health— liveness, no authGET /doc— OpenAPI JSONGET /docs— Swagger UI/v1— versioned HTTP API on each service Worker
Services
| Service | Binding | Owns |
|---|---|---|
| Billing | BILLING | Invoices, payments, and billing records |
| Bookings | BOOKINGS | Workshop bookings and scheduling |
| Communications | COMMUNICATIONS | Outbound communications and webhooks |
| Customers | CUSTOMERS | Customer accounts and contact details |
| Directory | DIRECTORY | Organisations, people, locations, and login |
| Enquiry | ENQUIRY | Marketing form submissions and outbound email |
| Expense | EXPENSE | Expenses and receipt capture |
| HR | HR | Employment records, shifts, attendance, contracts, and leave |
| Listings | LISTINGS | Telcam Auto vehicle listings and media |
| Planning | PLANNING | Workforce demand, eligibility, and schedules |
| Playbooks | PLAYBOOKS | SOPs, recipes, and published operational knowledge |
| Quotes | QUOTES | Jobs, quotes, evidence, signatures, and uploads |
| Raffle | RAFFLE | Raffle campaigns and one entry per receipt |
| Signage | SIGNAGE | Shops, screens, pages, and Pi devices |
| Stock | STOCK | Per-site count lists and stock takes |
| Tickets | TICKETS | Issue tracking, SLA, and webhooks |
| Training | TRAINING | Skills, certifications, and readiness |
| Venue | VENUE | Brands, checklists, and tasks |
Endpoint documentation is generated from each Worker's OpenAPI spec. Each service page links to its interactive API reference. CI publishes updated specs from each API repository on push to main.
Calling an API
Login tokens come from Directory (orgId, actorId). Domain Workers resolve the caller's user type (admin, area-manager, manager, member) from Directory memberships. Development tokens may still include actorType. Error bodies follow the shared envelope on the Errors page.
curl -sS \
-X GET \
-H "Host: venue" \
"https://api.mayawealth.co.uk/v1/health"See Authentication and Errors before integrating a new client.