Skip to content

Mobile app

Scan, check out, reserve, and walk an audit from a phone.

The mobile app uses the same account as the website. It talks to the REST API, not the /admin pages.

Sign in

Log in with email and password. If the account has two-factor, finish with an authenticator code, a recovery code, or Use passkey on a development build (not Expo Go). Register the passkey on the web first. Mobile tokens last 90 days; sign in again when they expire.

Later requests send Authorization: Bearer <token>. Pick the Organisation from the list and the app sends it as X-Organisation-Id.

If this Organisation requires an authenticator and you have not added one, the app shows a dedicated screen: enrol on the web, then pick the Organisation again.

What it is for

Interactive API docs locally: /docs/api.

If the Organisation is view-only, reads still work and writes fail.