A full-featured CRM backend — leads, meetings, demos, quotations, GST tax invoices, purchase orders, payroll, attendance, multi-channel campaigns, a client portal and more. All secured with Sanctum authentication and role-based access control.
27 permission-scoped modules spanning 582 API endpoints, backed by 141 Eloquent models and 45 service classes.
Standalone Tax Invoices with per-line CGST/SGST and a computed HSN tax summary.
Full PO workflow with configurable terms and server-side total verification.
Ingest Facebook/Instagram and website leads through signed webhooks.
Run SMS, WhatsApp (WABA), and RCS campaigns with audience targeting.
A separate auth flow for end-clients to view projects and chat.
Per-user sales, pipeline, and product-sales charts plus lead trends.
Full Raw → Verified → Client lifecycle — create, update, transfer, share, bulk delete, export/import. Follow-ups, callbacks, lead groups, phone/email normalization, and priority management.
Ingest leads from Meta (Facebook/Instagram) Lead Ads via signed webhooks and from your website via a shared-secret webhook. Captured leads land in a review pool for transfer.
Schedule and manage client meetings with full lifecycle support — transfer, reschedule, cancel, OTP-based verification, arrived/started/completed status tracking.
Schedule product demos with assignees, products, and Google Calendar integration. Full demo lifecycle — start, complete, cancel, reschedule, and share with attendees.
Log and track field sales visits. Create, fetch, search, and delete visit records. Linked to leads for a complete activity trail.
Central product catalogue used across sales, demos, meetings, tasks, and quotations. CRUD with search and CSV export.
Record sales against leads, track payment history, and run aggregated or individual sales reports. Per-sale slab incentives gated by sale targets, a read-only incentive report, finance approval and billing workflows.
Build and send professional quotations with line items, terms, and custom email bodies. Draft workflow, PDF export, email history, and resend functionality.
Standalone GST Tax Invoices with per-line CGST/SGST, a computed HSN tax summary, and a draft → final flow. Generate branded PDFs and email them to customers.
Create and manage purchase orders with line items, configurable terms, and server-side total verification. Draft workflow with PDF generation and emailing.
Allocate budgets, process reimbursements, and track every movement through a ledger. Company expenses, direct and request-based reimbursements with approval workflows.
Configure credit settings and run an approval workflow for credit requests. Pending, approved, and rejected views keep spend governed per account.
Manage client projects end-to-end with team assignments, tickets, media file uploads, project chat, and task linking. Active and completed project views.
Multi-assignee tasks with tags, queries, logs, and recurrence management. Task completion tracking, product attachments, and per-user activity logs.
Ticketing system for internal and onboarding support requests. Create, assign, update, and close tickets with a full status lifecycle and audit trail.
Per-product typed onboarding forms with fields defined per product. Fields can map to lead attributes for pre-fill. Submissions email configurable recipients and open a helpdesk ticket.
A separate authentication flow for end-clients to view their projects, chat with the team, and manage their profile. Isolated from internal staff access.
Flexible tagging system shared across tasks and projects. Create, update, delete, and search tags for better content organisation.
GPS-enabled check-in/check-out with real-time location tracking. Aggregated and detailed attendance reports, backfill support, and subordinate views.
Real-time GPS location tracking for field staff with configurable geofences. Powers attendance validation and field-visit verification.
Define leave types and entitlements per user. Application workflow with approval and rejection by managers. Pending, approved, and rejected leave views.
Generate and manage payroll payments with additions and deductions. Export individual or all payroll records. Payment type configuration included.
Per-user timesheets aggregating worked hours and client time across tasks and projects, feeding payroll and productivity reporting.
Configure work shifts and manage the company holiday calendar. Year-based holiday views and dashboard holiday widget for employees.
Full user lifecycle with profiles, documents, bank details, addresses, and assets. Role-based permission system with granular access control and user impersonation.
Multi-company support with active/inactive status management. Each company operates as an independent tenant with its own users, leads, and settings.
Email + OTP registration with Sanctum token-based auth. Google OAuth login, email verification, and secure logout. Account-level validation middleware.
Linked-device management with QR login, per-device sign-out, and MPIN set/update/reset flows. Super admins can remotely sign out any or all of a user's devices.
Multi-channel campaign execution across SMS, WhatsApp (WABA), and RCS with audience targeting, variable mapping, and reusable message templates per channel.
Configure multiple messaging channels — WhatsApp Business (WABA), SMS, RCS, IVR, and SMTP email — per account. Per-user integration settings supported.
IVR and manual call log tracking with incoming/outgoing call reports. Aggregated analytics, per-user call records, and bulk data uploads from IVR systems.
Push notification delivery (FCM) to user devices with per-user feeds and scheduled notifications. Real-time chat and events broadcast over Pusher, plus payment reminders.
Role-aware dashboard aggregating today's attendance, latest leads, meetings, tasks, projects, demos, visits, upcoming holidays, and team birthdays.
Dashboard KPIs plus deep per-user analytics — sales, pipeline and product-sales charts, lead capture trends, call/meeting/demo/visit breakdowns, and conversion funnels.
Immutable per-user activity audit trail tracking every meaningful action across the system for compliance and debugging.
Every request follows the same conventions. Grab a token, then send it as a bearer header on each call.
Authenticated endpoints use a module/action pattern over POST: POST /api/{module}/{action} — e.g. /api/lead/create.
Send your Sanctum token on every call: Authorization: Bearer <token>. Tokens are issued after OTP verification.
Requests pass through account-validation middleware, so every response is automatically scoped to your account_id.
Fine-grained RBAC via dot-notation permissions: module.sub_module.action, checked per route group.
🚀 Authentication flow
POST /api/login with your phone. An OTP is sent via SMS (or you'll be prompted for your MPIN).
POST /api/verify with phone + otp. The data field returns your bearer token.
Attach Authorization: Bearer <token> and start hitting module endpoints like /api/lead/create.
📱 Verify & receive a token
curl -X POST https://your-domain.com/api/verify \ -H "Content-Type: application/json" \ -d '{"phone":"9876543210","otp":"1234"}'
⚡ Authenticated request
curl -X POST https://your-domain.com/api/lead/create \ -H "Authorization: Bearer <token>" \ -H "Content-Type: application/json" \ -d '{"name":"Acme Corporation","phone":"9876543210"}'
Every endpoint returns a predictable envelope so clients never need to guess the structure.
✅ Success Response
{
"success": true,
"message": "Lead created successfully",
"data": {
"id": 42,
"name": "Acme Corporation",
"status": "new",
"priority": "high",
"created_at": "2026-06-20T10:00:00Z"
}
}
❌ Error Response
{
"success": false,
"message": "Validation failed",
"errors": {
"name": [
"The name field is required."
],
"email": [
"The email must be a valid address."
]
}
}
Modern, stable technologies chosen for performance and long-term maintainability.