Web routes

Listing of every registered HTTP route in routes/web.php, grouped by feature area. Public vs. auth-gated boundaries are explicit. See Architecture → Request lifecycle for the middleware pipeline that processes each request.

Note on module routes: Not every URL below is defined directly in routes/web.php. Modular routes (such as /settings/bill-com, /settings/mattermost, and /settings/slack) reside in their owning module’s routes/web.php (modules/BillCom, modules/Mattermost, modules/Slack), loaded via loadRoutesFrom() and each explicitly wrapped in Route::middleware(['web', 'auth']) — see Architecture → Request lifecycle. The URLs and behavior are identical.

For a live listing run:

php artisan route:list

Public (unauthenticated)

If the Google-verified email isn’t in the users table (or revoked_at IS NOT NULL), the callback bounces back to /login with a denial banner. No auto-provisioning.

Auth-gated — everything else

Dashboards

Servers

Server credentials (bulk)

Sites

| PATCH | /sites/{site}/cert · POST /cert/recheck | SSL source + recheck. | | POST | /sites/{site}/uptime/recheck | On-demand uptime probe for one site. | | PATCH | /sites/{site}/uptime-keyword | Optional homepage keyword the 5-minute probe must find. | | POST | /sites/{site}/uptime-body-check | Per-site skip of the white-screen body-length check (parked / SPA / gated homepages). | | POST | /sites/{site}/cache/purge | Queue a best-effort cache flush (Companion, Pressable, Cloudflare). | | POST | /sites/{site}/work-logs · PATCH/DELETE /work-logs/{workLog} | Client-report work log CRUD. | | GET | /companion/download | Stream compiled clockwork-companion.zip plugin package for manual WP Admin upload. | | POST | /sites/{site}/bans/{blockedIp}/unban · /bans/unban-all | Unban one / all. | | POST | /sites/{site}/gatekeeper/push | Push effective Gatekeeper lockout settings to this site immediately via HMAC REST. | | POST | /sites/{site}/install-companion | Install Companion. Dispatches to the provider’s installer via $site->host()->companionInstaller(). (The legacy /install-llar route was removed in 1.10.1 — Gatekeeper replaced LLAR.) | | PATCH | /sites/{site}/settings-layout | Save the per-site Settings tab card order (layout[] of card keys) to sites.settings_layout; reset=1 clears it back to the default order. JSON for XHR, redirect otherwise. | | POST | /sites/{site}/companion/{push-update,refresh-snapshot,sso,plugin-update} | Companion ops. |

| POST | /sites/{site}/care-plan[/clear-override] | Toggle / un-pin care plan. | | POST | /sites/{site}/auto-updates/toggle | Per-site nightly auto-update opt-in/out. | | POST | /sites/{site}/uptime-monitoring · /uptime-ignore | Per-site uptime opt-out / mute-alerts-but-keep-probing toggle (two different things — see Features → Uptime monitoring). | | POST | /sites/{site}/notifications/subscribers | Sync alert subscriber recipients for this site. | | POST | /sites/{site}/notifications/subscribers/create | Create and attach a new client alert recipient for this site. | | POST | /sites/{site}/inactive | Fleet-wide inactive toggle — site stays visible everywhere, excluded from Issues/nav badge/routine-maintenance alerts. See Features → Inactive sites. | | POST | /sites/{site}/fetch-db-creds | Fetch WP DB credentials over SSH for a single site. | | POST | /sites/{site}/refresh-wp-plugins | Re-probe via SSH. | | POST | /sites/{site}/email-vuln-report | Email a plugin-vulnerability summary for one site. | | POST | /sites/{site}/archive · POST /sites/{siteId}/unarchive | Soft-remove / restore. Archive on SpinupWP / Pressable also writes site_ingest_exclusions so host import will not resurrect the row; unarchive clears that exclusion. Unarchive uses {siteId} (not the {site} route-model binder) because the binder 404s on archived rows. | | GET | /forms | Fleet-wide contact-form-test inventory. Provided by Modules\ContactForms (self-registered via its ServiceProvider::boot()), not core routes/web.php. The forms site-detail tab only appears when the module is enabled. | | POST | /sites/{site}/form-tests · PATCH/DELETE /form-tests/{cft} · POST /form-tests/{cft}/test-now | Per-site form-test CRUD + on-demand run. Deliberately under /form-tests/, not /forms/, so it doesn’t collide with the ?tab=forms site-detail URL. Also module-provided now — see above. | | POST | /sites/{site}/contact-form/install-companion · /contact-form/rotate-secret | Contact-form add-on’s own Companion install/secret-rotate entry points (same controller methods as the generic ones above, reachable from the Forms page). |

Updates

Bans

Monitoring + security

Operations — fleet-wide system updates

Settings

| GET/PATCH/POST | /settings/backup-relay[/run-now] | Backup Relay (S3 Glacier IR) settings + on-demand execution. | | GET | /settings/backup-relay/sites/{site}/{archives,download} | Per-site S3 Glacier archive listing (archives) and streamed download of a specific archive (download). | | GET/POST | /settings/scheduled-jobs[/run] | Scheduled Jobs dashboard — every cron entry’s last outcome + manual Run now. | | GET/POST | /settings/bill-com[/run-{customer,care-plan}-sync] | Sync status + manual runs. | | GET/POST | /settings/mattermost | Per-event Mattermost notification toggles (ip_blocked, ssl_state_changed, site_went_down/up, etc.). | | GET/POST | /settings/slack | Same per-event toggles, Slack channel. Independent settings key (notifications.slack.events) from Mattermost’s. | | GET/POST/PATCH/DELETE | /settings/notifications[/recipients[/{recipient}][/test][/windows]] | Twilio SMS recipient list + off-window schedule. | | GET/PATCH | /settings/integrations | Overview of registered provider API credentials (.env stays primary source of truth). | | POST | /settings/integrations/{integration}/test | Runs that integration’s diagnostics check on demand and flashes the result. | | GET | /settings/integrations/{service}/limits | Dedicated vendor rate limits, telemetry impact, connection tunables, and .env credentials. | | PATCH | /settings/integrations/{service}/limits | Save operator connection tunables and write API credentials directly to .env. | | POST | /settings/integrations/{service}/limits/reset | Reset service connection tunables back to recommended vendor defaults. | | POST | /settings/integrations/{service}/credentials/{field}/remove | Remove an API key/credential from the root .env file. | | GET | /settings/modules | Module Directory — browses the official + community module catalog (Modules\Core\ModuleDirectoryClient, cached feed from clockworkcontrol.com/api/modules.json). See Features → Module Directory. | | POST | /settings/modules/refresh | Force-refresh the module feed, bypassing the cache. | | POST | /settings/modules/toggle | Enable or disable an installed module on-the-fly. | | GET | /settings/feedback | Feedback module settings and global toggle. | | GET | /feedback | Working list of all visual feedback items and discussion threads. | | GET | /feedback/{feedbackItem} | Single feedback item detail view with threaded discussions and prompt generator. | | GET | /settings/updates | Clockwork Control’s own self-update hub — checks the GitHub Releases API for a newer Core version, shows the Companion fleet-rollout breakdown, and links to the module catalog. Not to be confused with the fleet-wide /updates page (client WordPress sites) — see Features → System updates. | | POST | /settings/updates/check | Force a fresh check against the upstream release channel, bypassing the 12h cache. | | POST | /settings/updates/apply | Operator-triggered self-update: git pull → composer install --no-dev → migrate --force → optimize:clear. Aborts before touching anything if the working copy has uncommitted changes. | | GET | /settings/diagnostics | System diagnostics dashboard. | | GET | /settings/maintenance | Operator-only page showing DB size + a download button. | | GET | /settings/maintenance/backup | Streams a gzipped mysqldump of Clockwork Control’s own database straight to the browser (no temp file on the server). Contains every encrypted column ciphertext — SSH keys, per-site DB creds, Companion secrets — decryptable only by pairing the dump with APP_KEY. Treat downloaded copies with the same care as .env. | | GET | /settings/weird-stats | Pre-warmed threat-log stats. | | GET | /styleguide | Developer design system styleguide (StyleguideController) — interactive workbench displaying color tokens, buttons, form controls, badges, and modal components. | | GET | /search | Global fuzzy search endpoint powering Quick Jump (Cmd+K / Ctrl+K). Returns categorized, ranked results for servers, sites, modules, settings, documentation, and runbooks. | | GET | /ai-remedy | AiRemedy audit log, incident history, filtering by status, and aggregate token cost metrics. | | GET | /ai-remedy/accuracy | AiRemedy diagnosis accuracy report, operator verdict statistics, automated 60-minute outcome distributions, and readiness scorecard. | | GET | /ai-remedy/settings | AiRemedy configuration hub (model selection, automated spike watchdog toggle, CPU threshold %, and cooldown minutes). | | POST | /ai-remedy/test-connection | Validates OpenRouter API key, balance, and latency (throttled: 10,1). | | POST | /ai-remedy/simulate | Executes safe read-only test simulation in Watch Mode (throttled: 10,1). | | POST | /ai-remedy/servers/{server}/diagnose | Triggers live read-only SSH telemetry probe and OpenRouter root-cause triage (throttled: 15,1). | | POST | /ai-remedy/runs/{run}/execute | Admin-only. Runs the operator-selected subset of a run’s proposed commands (selected: [{index, command}]) via SSH with exit code validation; records per-command decisions; 409 for Shadow/simulation, already-run, stale (>2h) runs, or a server with a fix already running (throttled: 10,1). | | POST | /ai-remedy/runs/{run}/verdict | Authenticated operators submit diagnosis verdict (correct, partial, wrong, unsure) and optional feedback notes. | | DELETE | /ai-remedy/runs | Admin-only. Bulk-deletes the given run ids[] from the incident log (executing runs are kept); logs ai_remedy_runs_deleted. | | POST | /ai-remedy/runs/hide | Admin-only. Hides the given run ids[] from the incident log (sets hidden_at). | | POST | /ai-remedy/runs/unhide | Admin-only. Restores hidden runs to the incident log. | | GET | /ai-remedy/runs/{run} | Dedicated incident forensics page: telemetry snapshot, top processes, root cause, and stdout/stderr log. |

Email Authentication

Docs (this site)