Skip to main content

Public browser-safe configuration

GET 
/api/v1/config

Unauthenticated configuration blob the dashboard reads at boot, before any login. Contains only non-secret, browser-safe values; no parameter marked secret in the system-parameter registry is ever exposed here (in particular posthog.personal_api_key is not).

When a feature is disabled its configuration fields are omitted rather than returned empty — e.g. with PostHog unconfigured the response is exactly {"posthog": {"enabled": false}}. The same rule applies to whatsapp and telegram: whatsapp is a single resolved boolean, and telegram emits its public bot username only while it is enabled.

Responses​

Public configuration