Whitelisted API inventory

Purpose

List HTTP-exposed Python functions for integration and security review. Internal helpers without @frappe.whitelist are omitted.

URL pattern: /api/method/leekimerp.api.<module>.<function_name> (Frappe standard; confirm CSRF/session rules for your version).

---

api/user.py

Function	Auth	Methods	Inputs (summary)	Returns / effects
get_all_users	Session	GET	—	User list
add_user	Guest	POST	full_name, username, email, password, gender, phone	Creates user flow
verify_email	Guest	POST	email, code	Verification
login_new	Guest	POST	username, password	Login
reset_password	Guest	POST	username_or_email	Reset flow
verify_reset_key	Guest	GET	email, key	Validate reset key
new_password	Guest	POST	email, password, key	Set password
new_password_sid	Session	POST	sid, old_password, password	Change password
check_session	Session	GET	sid	Session check
logout	Session	GET	sid	Logout
generate_secret	Session	GET	email	TOTP/secret step
get_secret	Session	GET	email	Retrieve secret
user_master	Guest	GET	—	Master data payload
get_summary	Session	default	user	SQL user lookup

---

api/user_custom.py

Function	Auth	Methods	Inputs	Effects
get_all_users	Session	GET	email, username, active (optional)	Filtered users

---

api/xero.py (selected)

Function	Auth	Notes
get_app_webhook_secret	Guest GET	Webhook secret retrieval
xero_webhook_connection	Guest POST	Xero webhook ingress
sync_contact_with_tenant	Session	Contact sync
create_contact	Session POST	Create Xero/ERP contact
update_sync_status	Session POST	Sync flags
make_new_item	Session	Item creation helper
get_xero_invoices	Session GET	List invoices
sync_xero_invoices	Session GET	Trigger sync
get_total_amount_due_by_contact	Session	AR amount
get_officers	Session	Officers for application

Non-whitelisted helpers perform OAuth, invoice mapping, and ERP writes — see source.

---

api/stripe.py

Function	Role
create_payment_link	Stripe Payment Link for invoice
get_payment_link_status	Status polling
payment_completed	Completion callback handling
cancel_payment_link	Cancel link

---

api/stripe_webhook.py

Function	Auth	Role
stripe_webhook	Guest	Main Stripe webhook
test_webhook	Guest	Testing only
debug_webhook_signature	Guest	Debug
stripe_webhook_test	Guest	Test endpoint
test_payment_webhook	Session	Test invoice webhook

---

api/docusign.py

Function	Role
docusign_auth	Auth + envelope workflow
docusign_queue_send	Queue processor

---

api/item.py

Function	Methods	Role
get_all_items	GET	List items
get_only_items	GET	Simplified list
get_query_items	GET	group, disabled
add_item	POST	Create item
update_item	PUT	Update
delete_item	DELETE	Delete
add_note	POST	Note on item

Most endpoints allow guest in current code — security review required before production exposure.

---

api/company_search.py

Function	Methods	Role
entity_search	GET	Entity search
ssic_search	GET	SSIC search
ssic_exact_search	GET	Exact SSIC

---

api/company_attachments.py

Function	Methods	Role
upload	POST	File upload
officer_upload_files	POST	Officer documents

---

api/website_faqs.py

Function	Role
category	FAQ categories
get_top_faq	Top FAQs
get_category_faq	FAQs by category

---

api/issue.py

Function	Role
create_new_support_ticket	Session POST
add_message_in_ticket	Guest/Session POST
get_ticket	Guest GET

---

api/printouts.py

Function	Role
get_printouts_data	Session; company_id optional

---

api/sales_invoice_report.py

Function	Role
generate_html_copy	HTML for invoice copies

---

api/bulk_upload.py

Function	Role
bulk_upload	POST guest — high risk; validate doctype_name + data server-side

---

api/stamp.py

Function	Role
generate_stamp	Guest POST — QR/stamp generation

---

api/time_tracking.py

Function	Role
log_time	Session POST
user	Session GET
app_data	Guest GET
reset_password	Guest POST
new_version	Guest POST
login	Guest POST

---

Maintenance

Regenerate this table after adding @frappe.whitelist:

rg '@frappe\.whitelist' leekimerp/leekimerp/api -n