Dashboard guide
Invoices are created via the REST API from your POS or ERP. The Esnad dashboard at app.esnadapi.com is the operations console for your team: monitoring volume, managing EGS units and API keys, reviewing audit history, and handling billing.
Overview
The home screen shows invoice volume over time, compliance status, EGS certificate health, and recent activity. Use the entity and environment filters in the header to narrow charts to a specific branch or sandbox vs production.
Team & roles
Owners and admins can invite colleagues from Team. Each member gets a dashboard login (JWT) separate from API keys.
- Owner — full access, billing, and team management.
- Admin — manage EGS, API keys, webhooks, and invoices; cannot change billing or delete the company.
- Developer — API keys, webhooks, and read-only access to invoices and compliance.
- Viewer — read-only access to dashboards and invoice lists.
Invites are sent by email. The recipient sets their password on the accept link before signing in. Two-factor authentication (TOTP) can be enabled per user under Settings.
API keys
Create, rotate, and revoke keys under API Keys. Keys are shown only once at creation. Your POS or ERP uses the key in Authorization: Bearer … for invoicing and EGS setup — not for dashboard pages. See API keys and Authentication.
Webhooks
Set your HTTPS webhook URL and signing secret under Webhooks. Use the delivery log to inspect failed events and trigger manual retries. Your application receives POST requests when invoices are reported, cleared, or fail — see Webhooks (receive events) for payload shapes and signature verification.
Compliance & EGS
ZATCA compliance checks run automatically when you onboard an EGS unit (via API or dashboard). The dashboard shows certificate health and lets you run an optional sandbox compliance test before going live. Integrators poll GET /v1/egs/:id/status until the unit is active — no separate compliance API is required for normal flows. See EGS units.
Audit log
The Audit page records tenant-scoped actions: logins, API key changes, EGS onboarding, webhook updates, team invites, and billing events. Each entry includes the actor, timestamp, and action type. Use it for internal compliance reviews and troubleshooting who changed what.
Activity & API requests
The Activity page lists recent authenticated API calls (method, path, status, latency). This complements the audit log with technical request-level detail for developers debugging integrations.
Related API docs
- Authentication — API keys vs dashboard JWT
- API keys — create, rotate, and revoke keys
- EGS units — onboard devices and renew certificates
- Webhooks — event payloads your endpoint receives (configure URL in dashboard)
- Invoices — submit and poll status via API