{"message":"XAU Admin API","version":"1.0.0","endpoints":{"health":"/health","auth":"/api/auth","users":"/api/users","accounts":"/api/accounts","stats":"/api/stats","strategies":"/api/accounts/:accountId/strategies"},"documentation":{"auth":{"POST /api/auth/login":"User login (requires: identifier, password)","POST /api/auth/verify":"Verify JWT token","POST /api/auth/refresh":"Refresh JWT token"},"users":{"GET /api/users":"Get all users","GET /api/users/:id":"Get user by ID","POST /api/users":"Create new user (requires: username, email, password)","PUT /api/users/:id":"Update user","PATCH /api/users/:id/password":"Update user password","DELETE /api/users/:id":"Delete user permanently","PATCH /api/users/:id/deactivate":"Deactivate user","PATCH /api/users/:id/activate":"Activate user"},"accounts":{"GET /api/accounts":"List all MT5 accounts (admin)","GET /api/accounts/:id":"Get account credentials + account-level risk_mngt (admin)","POST /api/accounts":"Create account + spin up container (admin)","PUT /api/accounts/:id":"Update account credentials and risk_mngt (admin)","DELETE /api/accounts/:id":"Delete account + stop container (admin)","GET /api/accounts/hard-stop/state":"Report whether any strategy is enabled (admin)","POST /api/accounts/hard-stop":"Hard-stop every strategy on every account (admin)","GET /api/accounts/:id/hard-stop/state":"Report enabled strategies for one account (admin)","POST /api/accounts/:id/hard-stop":"Hard-stop every strategy on one account (admin)","POST /api/accounts/:id/close-positions":"Close all open positions on one account (admin; all strategies must be disabled)"},"stats":{"GET /api/stats":"Latest account stats snapshot (price + exposure, admin)","GET /api/stats?accountId=1":"Stats snapshot for a specific account (admin)"},"strategies":{"GET /api/accounts/:accountId/strategies":"List strategies for account (admin)","POST /api/accounts/:accountId/strategies":"Create strategy for account (admin)","PUT /api/accounts/:accountId/strategies/:id":"Replace strategy by id (admin)","DELETE /api/accounts/:accountId/strategies/:id":"Delete strategy by id (admin)"}}}