Open Mercato
AI‑supportive, modular ERP foundation for product & service companies
Welcome to Your Open Mercato Installation
This is a customizable start page for your fresh Open Mercato installation. Choose your role below to get started and explore the features available to you.
Default Password
The default password for all demo accounts is secret. To change passwords, use the CLI command: yarn mercato auth set-password --email <email> --password <newPassword>Demo account emails are printed in the terminal output during yarn initialize.
Choose Your Role
Super Admin
Full system access with complete control
Available Features:
- •Manage organization structure
- •Create and manage roles
- •Manage all users across organizations
- •System-wide configuration
- •Access to all modules and features
Admin
Organization-level administration
Available Features:
- •Admin specific organization(s)
- •Manage users within organization
- •Configure organization settings
- •Access to admin modules
- •Report and analytics access
Employee
Work on your daily tasks
Available Features:
- •Work on assigned tasks
- •Access organization resources
- •Collaborate with team members
- •View personal dashboard
- •Submit reports and updates
API resources
Explore the official documentation and download the generated OpenAPI exports for this installation.
OpenAPI Explorer
Interactive HTML viewer with endpoint details, payload schemas, and sample requests.
Open explorerOfficial documentation
Guides and tutorials covering setup, modules, and customization.
Open docsOpenAPI JSON
Machine-readable OpenAPI 3.1 document for integrating with the platform.
Download JSONOpenAPI Markdown
Human-friendly Markdown rendering of the current OpenAPI document.
Download MarkdownCurrent API base URL: https://app.nwf24.pl/api
Database Status
Status: Connected
Users:4
Tenants:1
Organizations:1
Active Modules
Authentication & Accountsv0.1.0
User accounts, sessions, roles and password resets.
FE:3BE:11API:37i18n:5
API Keysv0.1.0
Manage access tokens for external API access.
BE:2API:3i18n:5
Directory (Tenants & Organizations)v0.1.0
Multi-tenant directory with tenants and organizations.
BE:7API:13i18n:5
Configurationv0.1.0
Shared configuration storage and helpers for module settings.
BE:3API:8i18n:5
Custom Entities & Fieldsv0.1.0
User-defined entities, custom fields, and dynamic records storage.
BE:10API:19i18n:5
Query Indexesv0.1.0
Hybrid query layer with full-text and vector search capabilities.
BE:1API:3i18n:5
API Documentation
Auto-generated documentation for all HTTP endpoints.
FE:1BE:1API:1
Audit & Action Logsv0.1.0
Tracks user actions and data accesses with undo support scaffolding.
BE:1API:5i18n:5
Notificationsv0.1.0
In-app notifications with module-extensible types and actions.
BE:3API:22i18n:5
Admin Dashboardsv0.1.0
Configurable admin dashboard with module-provided widgets.
API:10i18n:5
Events
Event bus and subscriber dispatch
API:2
Progressv0.1.0
Generic server-side progress tracking for long-running operations
API:6i18n:5
Customer Relationship Managementv0.1.0
Core CRM capabilities for people, companies, deals, and activities.
BE:18API:105i18n:5
Shared Dictionariesv0.1.0
Organization-scoped dictionaries for reusable enumerations and appearance presets.
BE:1API:11i18n:5
Feature Togglesv0.1.0
Global feature flags with tenant-level overrides.
BE:5API:12i18n:5
AI Assistantv0.1.0
MCP server for AI assistant integration with multi-tenant support.
BE:8API:40i18n:5
IMAP + SMTP Email Channel
Connect personal mailboxes via IMAP for inbound polling and SMTP for outbound delivery. Pairs with the Communications Hub (SPEC-045d).
Communication Channels
Unified hub bridging external chat/email channels (Slack, WhatsApp, Email) to the Messages module. Adapter contract, channel-native payload storage, reactions, and per-channel threading. OAuth state cookies are single-use via short-TTL cache markers (see lib/oauth-state.ts); multi-replica deployments MUST set CACHE_STRATEGY=redis so replay protection is shared across replicas.
BE:3API:46i18n:5
Messagesv0.1.0
Internal messaging system with attachments, actions, and email forwarding.
FE:1BE:3API:26i18n:5
Attachmentsv0.1.0
File attachments and media management.
BE:2API:14i18n:5
Customer Identity & Portal Authenticationv0.1.0
Customer-facing authentication with two-tier identity model and full RBAC.
BE:7API:53i18n:5
Customer Portalv0.1.0
Self-service customer portal framework with login, signup, dashboard, sidebar navigation, and extensible widget system.
FE:8i18n:5
Workflow Enginev1.0.0
Orchestrate business processes with state machines, transitions, and activities
FE:3BE:13API:56i18n:5
Business Rulesv0.1.0
Business Rules Engine for defining, managing, and executing business logic and automation rules.
BE:8API:18i18n:5
Schedulerv0.1.0
Database-managed scheduled jobs with admin UI
BE:4API:8i18n:5
Webhooksv0.1.0
Standard Webhooks compliant outbound webhook delivery for platform events.
BE:3API:24i18n:5
Integrations
Core integration framework — external ID mapping, status badges, and integration registry.
BE:3API:8i18n:5
Websitev0.1.0
Publiczny ingest leadów z formularza nwf24.pl do CRM (customers) przez command bus.
API:2
GUS BIR1 + VIESv0.1.0
Lookup danych firmy w rejestrze GUS BIR1 (po NIP/REGON) oraz weryfikacja statusu VAT-UE w VIES. Uzywane przez onboarding klienta (SPEC-002a).
CRBR (beneficjenci rzeczywisci)v0.1.0
Odpytuje publiczne API przegladowe CRBR (SOAP, ApiPrzegladoweCRBR) po NIP/KRS i zwraca wpis o beneficjentach rzeczywistych. Konsument: modul aml (SPEC-007b).
Onboarding klientav0.1.0
Zakladanie konta klienta z prefillem z rejestrow (GUS BIR1 + VIES) i sledzenie statusu onboardingu. Zob. .ai/specs/SPEC-002a-2026-08-06-client-account-provisioning.md.
FE:2BE:3API:13
Assistant (public)v0.1.0
Publiczny asystent AI NWF — narzędzia read-only cytujące oficjalne źródła (KB, Dziennik Ustaw/ELI, interpretacje MF/EUREKA).
SEO Cockpitv0.1.0
Rank-tracking z Google Search Console (dzienny pull Search Analytics, quick-winy 8-30 z trendem MoM) oraz monitoring Core Web Vitals przez PageSpeed Insights (tygodniowy pomiar, trend per URL). Widzety Pulpitu i generyczny tor alertow SEO.
BE:3API:10
Lista wykluczenv0.1.0
Rejestr podmiotow, do ktorych nie wolno pisac: sprzeciw RODO, prosba o zaprzestanie kontaktu, odbicia trwale, klienci i konkurencja. Dopasowanie po NIP-ie, numerze KRS, adresie e-mail albo calej domenie. Kanal odczytu dla silnika pozyskiwania z drugiego repozytorium.
BE:3API:9
Interakcje na dealach bez podpiętej firmy/osobyv0.1.0
Naprawia logowanie komentarzy i aktywności na dealach utworzonych przez skaner KRS, które nie mają jeszcze podpiętej firmy/osoby — przez nadpisanie wadliwych AI-tooli modułu customers.
AML — weryfikacja rejestrowav0.1.0
Niezmienna, datowana migawka danych rejestrowych firmy (GUS, status VAT, odpis KRS) jako trwaly dowod weryfikacji klienta wymagany ustawa AML. Ponowienie tworzy nowa wersje; poprzednia zostaje w historii.
API:3
Currenciesv0.1.0
Currencies and Exchange rate management
BE:7API:14i18n:5
Brandingv0.1.0
Nadpisania i18n marki (New Waves Finance) dla ekranów widocznych dla klienta.
i18n:4
Quick Links