Versioned routes
Every endpoint lives under /api/v1/..., so future changes never break an integration built today.
Core capability
Token authentication
Laravel Sanctum-issued tokens, the same mechanism securing the desktop app's own connection to your account.
Same permission system
API requests are gated by the exact same role and permission checks as the web app — no separate, weaker access model.