Send one attendance event

POST

/device/scan

Called after a fingerprint match. Offline events saved on the SD card are uploaded through this
same call, oldest first, with the original scan time and offline: true.

The backend decides check-in vs check-out. Unknown UIDs are still stored and return 2xx.
Dedupe key: (device_id, uid, timestamp), or (device_id, event_id) when sent.

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Body Params application/jsonRequired

Examples

Responses

🟢200

application/json

Stored (also for duplicates and unknown UIDs)

Bodyapplication/json

🟠400BadRequest

🟠401Unauthorized

🟠403Forbidden

🟠404UnknownDevice

🟠429RateLimited

🔴500ServerError

Request Example

Shell

JavaScript

Java

Swift

cURL

liveoffline

curl --location '/device/scan' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{
    "device_id": "MyDevice-A0CDCB",
    "uid": 12,
    "timestamp": "2026-10-06T13:07:32Z",
    "time_trusted": true,
    "offline": false
}'

Response Example

200 - checkIn

{
    "status": "ok",
    "duplicate": false,
    "display_name": "Ada Obi",
    "action": "check_in"
}

Modified at 2026-10-07 14:49:40

Report the result of a fingerprint enrolment

Upload up to 100 saved events in one request