mortar control plane

Provisioning service

This service is the deploy-side counterpart to the builder. It creates Neon projects, syncs Infisical secrets, provisions Cloudflare resources, and runs the scheduled audit-witness jobs.

API

  • POST /api/apps— create + provision a customer app
  • GET /api/apps— list your apps
  • GET /api/apps/[id]— status
  • DELETE /api/apps/[id]— tear down
  • POST /api/apps/[id]/deploy— re-run state machine
  • POST /api/apps/[id]/witness— schedule a Rekor submission
  • GET /api/health

Authentication

Two modes: a Clerk session for the builder dashboard (V1.5), or a bearer token via Authorization: Bearer $INTERNAL_API_TOKEN. The builder UI uses the bearer token from its server-side env.