API tokens and outbound webhooks

Two new integration surfaces — bearer-token access to read your fleet over HTTPS, and outbound webhooks that fire when assets raise an alert or come online.

Two new ways to connect Pointnode to the rest of your stack landed in Settings:

API tokens at Settings → API tokens. Generate a scoped bearer token, copy it once, and use it to read your fleet over HTTPS — useful for piping live data into a BI tool, a CMMS, or a custom dashboard. Tokens can be scoped to read-only and revoked at any time.
Webhooks at Settings → Webhooks. Register a URL on your side and the platform will POST a signed JSON payload when a fault is raised, when an asset comes online or goes stale, and (soon) when a lockout is issued or released. Retry-with-backoff on 5xx; signed with HMAC-SHA-256 against your per-endpoint secret.

Both surfaces are governed by the same role gates as the rest of the platform: only Organisation Admins can create or revoke tokens and webhooks; everything is audit-logged.