# Create Plant Source: https://docs.connecttechglobal.co.uk/api-reference/endpoint/create POST /plants Creates a new plant in the store # Delete Plant Source: https://docs.connecttechglobal.co.uk/api-reference/endpoint/delete DELETE /plants/{id} Deletes a single plant based on the ID supplied # Get Plants Source: https://docs.connecttechglobal.co.uk/api-reference/endpoint/get GET /plants Returns all plants from the system that the user has access to # Introduction Source: https://docs.connecttechglobal.co.uk/api-reference/introduction Example section for showcasing API endpoints If you're not looking to build API reference documentation, you can delete this section by removing the api-reference folder. ## Welcome There are two ways to build API documentation: [OpenAPI](https://mintlify.com/docs/api-playground/openapi/setup) and [MDX components](https://mintlify.com/docs/api-playground/mdx/configuration). For the starter kit, we are using the following OpenAPI specification. View the OpenAPI specification file ## Authentication All API endpoints are authenticated using Bearer tokens and picked up from the specification file. ```json theme={null} "security": [ { "bearerAuth": [] } ] ``` # Development Source: https://docs.connecttechglobal.co.uk/development Learn how to preview changes locally **Prerequisite** You should have installed Node.js (version 18.10.0 or higher). Step 1. Install Mintlify on your OS: ```bash npm theme={null} npm i -g mintlify ``` ```bash yarn theme={null} yarn global add mintlify ``` Step 2. Go to the docs are located (where you can find `mint.json`) and run the following command: ```bash theme={null} mintlify dev ``` The documentation website is now available at `http://localhost:3000`. ### Custom Ports Mintlify uses port 3000 by default. You can use the `--port` flag to customize the port Mintlify runs on. For example, use this command to run in port 3333: ```bash theme={null} mintlify dev --port 3333 ``` You will see an error like this if you try to run Mintlify in a port that's already taken: ```md theme={null} Error: listen EADDRINUSE: address already in use :::3000 ``` ## Mintlify Versions Each CLI is linked to a specific version of Mintlify. Please update the CLI if your local website looks different than production. ```bash npm theme={null} npm i -g mintlify@latest ``` ```bash yarn theme={null} yarn global upgrade mintlify ``` ## Deployment Unlimited editors available under the [Startup Plan](https://mintlify.com/pricing) You should see the following if the deploy successfully went through: ## Troubleshooting Here's how to solve some common problems when working with the CLI. Update to Node v18. Run `mintlify install` and try again. Go to the `C:/Users/Username/.mintlify/` directory and remove the `mint` folder. Then Open the Git Bash in this location and run `git clone https://github.com/mintlify/mint.git`. Repeat step 3. Try navigating to the root of your device and delete the \~/.mintlify folder. Then run `mintlify dev` again. Curious about what changed in a CLI version? [Check out the CLI changelog.](/changelog/command-line) # Stripe Integration Security Monitoring Source: https://docs.connecttechglobal.co.uk/integrations/stripe-security Comprehensive security monitoring and audit logging for the Stripe integration. This document outlines the comprehensive security monitoring and audit logging system implemented for the Stripe integration in Connect Tech Global. ## Overview The security monitoring system provides real-time tracking, alerting, and forensic analysis capabilities for all Stripe-related operations, ensuring compliance with security standards and enabling rapid incident response. ## Security Event Categories ### Event Types * **STRIPE\_SYNC\_STARTED**: Synchronization process initiated * **STRIPE\_SYNC\_COMPLETED**: Synchronization completed successfully * **STRIPE\_SYNC\_FAILED**: Synchronization failed with errors * **STRIPE\_CONNECTION\_ESTABLISHED**: New Stripe account connected * **STRIPE\_CONNECTION\_REMOVED**: Stripe account disconnected * **STRIPE\_TOKEN\_REFRESH**: Access token refreshed * **AUTHENTICATION\_FAILURE**: Authentication errors * **PERMISSION\_DENIED**: Authorization failures * **RATE\_LIMIT\_EXCEEDED**: API rate limits hit * **MANUAL\_ALERT\_GENERATED**: Manual security alerts ### Risk Levels * **LOW**: Normal operations, successful syncs * **MEDIUM**: Partial failures, warnings, retryable errors * **HIGH**: Authentication failures, permission denials * **CRITICAL**: System-wide failures, security breaches ### Categories * **integration**: Stripe API interactions * **authentication**: Login and token management * **authorization**: Permission checks * **data\_access**: Data retrieval and modification * **system**: Internal system events * **compliance**: Regulatory and audit events ## Database Schema ### Security Events Table ```typescript theme={null} securityEvents: defineTable({ organizationId: v.optional(v.string()), userId: v.optional(v.string()), sessionId: v.optional(v.string()), eventType: v.string(), category: v.string(), riskLevel: v.string(), source: v.string(), ipAddress: v.optional(v.string()), userAgent: v.optional(v.string()), location: v.optional(v.string()), resource: v.optional(v.string()), resourceType: v.optional(v.string()), action: v.optional(v.string()), success: v.boolean(), errorCode: v.optional(v.string()), errorMessage: v.optional(v.string()), metadata: v.optional(v.any()), processed: v.boolean(), processedAt: v.optional(v.number()), alertGenerated: v.boolean(), alertLevel: v.optional(v.string()), timestamp: v.number(), createdAt: v.number(), }) ``` ### Indexes * By organization and timestamp * By user and timestamp * By risk level and timestamp * By event type and category * By processed status ## API Endpoints ### GET /api/integrations/stripe/security Retrieve security events and monitoring data. **Query Parameters:** * `eventType`: Filter by event type * `category`: Filter by category * `riskLevel`: Filter by risk level * `limit`: Maximum number of events (default: 50) * `since`: Timestamp to filter events from **Response:** ```json theme={null} { "events": [...], "highRiskEvents": [...], "stats": { "totalEvents": 1250, "highRiskEvents": 15, "failureRate": 0.02, "avgResponseTime": 450 }, "suspiciousActivity": [...] } ``` ### POST /api/integrations/stripe/security/alert Manage security alerts and event processing. **Actions:** * `mark_processed`: Mark events as processed * `generate_alert`: Generate manual alerts ## Circuit Breaker Integration ### GET /api/integrations/stripe/circuit-breaker Monitor circuit breaker status and health. **Response:** ```json theme={null} { "organizationStats": {...}, "globalStats": {...}, "overallHealth": { "status": "healthy", "openCircuits": 0, "totalRequests": 15420, "failureRate": 0.01 } } ``` ### POST /api/integrations/stripe/circuit-breaker Manage circuit breaker states. **Actions:** * `reset`: Reset circuit breaker * `force_open`: Force circuit breaker open * `force_close`: Force circuit breaker closed ## Security Monitoring Features ### Real-time Event Logging All Stripe operations are automatically logged with: * Timestamp and duration * Organization and user context * Success/failure status * Error categorization * Performance metrics * Retry information ### Suspicious Activity Detection Automated detection of: * Multiple authentication failures * Unusual API usage patterns * Rate limit violations * Permission escalation attempts * Abnormal sync frequencies ### Alert Generation Automatic alerts for: * High-risk events * Authentication failures * System errors * Performance degradation * Security policy violations ### Compliance Reporting * Audit trail maintenance * Data access logging * Change tracking * Retention policies * Export capabilities ## Implementation Details ### Security Event Logging ```typescript theme={null} await logSecurityEvent(convex, { organizationId, eventType: 'STRIPE_SYNC_STARTED', category: 'integration', riskLevel: 'low', source: 'system', resource: stripeAccountId, action: 'sync_invoices', success: true, metadata: { syncType: 'invoices', batchSize: 100 } }); ``` ### Error Categorization Errors are automatically categorized by type: * Rate limit errors → HIGH risk * Authentication errors → HIGH risk * Network errors → MEDIUM risk * Validation errors → LOW risk ### Circuit Breaker Protection Organization-specific circuit breakers prevent cascading failures: * Failure threshold: 5 failures in 60 seconds * Recovery timeout: 30 seconds * Half-open max calls: 3 * Success threshold: 2 consecutive successes ## Best Practices ### Event Logging 1. Log all significant operations 2. Include relevant context and metadata 3. Use appropriate risk levels 4. Avoid logging sensitive data ### Monitoring 1. Set up alerts for high-risk events 2. Monitor failure rates and patterns 3. Review suspicious activity regularly 4. Maintain audit trails ### Incident Response 1. Use security events for forensic analysis 2. Correlate events across systems 3. Generate compliance reports 4. Implement automated responses ## Configuration ### Environment Variables * `SECURITY_LOG_LEVEL`: Minimum log level (default: 'low') * `ALERT_THRESHOLD`: Alert generation threshold * `RETENTION_DAYS`: Event retention period (default: 90 days) ### Monitoring Intervals * Real-time event logging * Hourly suspicious activity detection * Daily compliance reporting * Weekly security reviews ## Troubleshooting ### Common Issues 1. **High event volume**: Adjust log levels and retention 2. **False positives**: Tune detection algorithms 3. **Performance impact**: Optimize database queries 4. **Alert fatigue**: Refine alert criteria ### Debugging 1. Check security event logs 2. Review circuit breaker status 3. Analyze error patterns 4. Monitor system performance ## Future Enhancements ### Planned Features * Machine learning-based anomaly detection * Advanced correlation analysis * Real-time dashboard * Mobile alerts * Integration with SIEM systems ### Compliance Improvements * GDPR compliance features * SOC 2 audit support * PCI DSS requirements * Industry-specific regulations # Stripe Integration User Guide Source: https://docs.connecttechglobal.co.uk/integrations/stripe-user-guide Connect, manage, and disconnect your Stripe account with Connect Tech Global. This guide explains how to connect, manage, and disconnect your Stripe account with Connect Tech Global, along with important information about data access and security policies. ## Getting Started ### Prerequisites * Active Connect Tech Global account * Stripe account with appropriate permissions * Organization admin or billing role in Connect Tech Global ### Supported Stripe Features * Invoice synchronization * Subscription management * Payment tracking * Customer data sync * Webhook event processing ## Connecting Your Stripe Account ### Step 1: Navigate to Integrations 1. Log in to your Connect Tech Global dashboard 2. Go to **Settings** → **Integrations** 3. Find the **Stripe** integration card 4. Click **Connect Account** ### Step 2: Authorize Connection 1. You'll be redirected to Stripe's authorization page 2. Review the requested permissions carefully 3. Click **Connect** to authorize the integration 4. You'll be redirected back to Connect Tech Global ### Step 3: Verify Connection 1. Confirm your Stripe account appears in the integrations list 2. Check that the connection status shows as **Active** 3. Review the last sync time and data summary ### Required Permissions The integration requires the following Stripe permissions: * **Read access** to invoices, subscriptions, and customers * **Webhook** permissions for real-time updates * **Metadata** access for synchronization tracking ## Managing Your Integration ### Viewing Sync Status * **Dashboard**: View sync status on the main dashboard * **Integration Settings**: Detailed sync logs and statistics * **Notifications**: Receive alerts for sync issues ### Manual Synchronization 1. Go to **Settings** → **Integrations** → **Stripe** 2. Click **Sync Now** to trigger immediate synchronization 3. Monitor progress in the sync logs ### Sync Frequency * **Automatic**: Every 4 hours by default * **Manual**: On-demand synchronization * **Webhook**: Real-time updates for supported events ## Data Access and Privacy ### What Data We Access The integration accesses the following Stripe data: #### Invoice Data * Invoice ID and number * Customer information * Line items and amounts * Payment status and dates * Tax information * Metadata and custom fields #### Subscription Data * Subscription ID and status * Customer details * Plan information * Billing cycles and amounts * Trial periods * Cancellation data #### Customer Data * Customer ID and email * Name and contact information * Billing addresses * Payment methods (tokenized only) * Subscription history ### What We Don't Access * **Payment card details**: Only tokenized references * **Bank account information**: Not accessed or stored * **Sensitive personal data**: Beyond business contact info * **Stripe Connect platform data**: Only your direct account ### Data Storage and Security * **Encryption**: All data encrypted in transit and at rest * **Access Control**: Role-based access within your organization * **Audit Logging**: Complete audit trail of all data access * **Retention**: Data retained according to your organization's policy * **Compliance**: SOC 2, GDPR, and PCI DSS compliant ## Security Features ### Real-time Monitoring * **Activity Logging**: All integration activities are logged * **Anomaly Detection**: Unusual patterns trigger alerts * **Failed Attempts**: Authentication failures are tracked * **Performance Monitoring**: Sync performance and errors ### Access Controls * **Organization-level**: Integration tied to your organization * **Role-based**: Admin and billing roles can manage integration * **Session Management**: Secure token handling and refresh * **IP Restrictions**: Optional IP allowlisting available ### Circuit Breaker Protection * **Failure Prevention**: Automatic protection against cascading failures * **Rate Limiting**: Respects Stripe API rate limits * **Retry Logic**: Intelligent retry with exponential backoff * **Health Monitoring**: Continuous health checks ## Troubleshooting ### Common Issues #### Connection Failed **Symptoms**: Unable to connect Stripe account **Solutions**: 1. Verify you have admin access to your Stripe account 2. Check that your Stripe account is in good standing 3. Ensure you're using the correct Stripe account 4. Try disconnecting and reconnecting #### Sync Errors **Symptoms**: Data not synchronizing properly **Solutions**: 1. Check the sync logs for specific error messages 2. Verify Stripe API keys are still valid 3. Ensure webhook endpoints are accessible 4. Contact support if errors persist #### Missing Data **Symptoms**: Some invoices or subscriptions not appearing **Solutions**: 1. Check the sync date range settings 2. Verify data exists in your Stripe account 3. Look for any filtering or exclusion rules 4. Trigger a manual full sync #### Performance Issues **Symptoms**: Slow sync times or timeouts **Solutions**: 1. Check your Stripe account data volume 2. Review sync frequency settings 3. Monitor for rate limiting issues 4. Consider adjusting batch sizes ### Getting Help * **Documentation**: Comprehensive guides and API references * **Support Portal**: Submit tickets for technical issues * **Community**: User forums and knowledge base * **Status Page**: Real-time system status and incidents ## Disconnecting Your Stripe Account ### Before You Disconnect * **Data Backup**: Export any needed data first * **Active Processes**: Ensure no critical syncs are running * **Team Notification**: Inform team members of the disconnection * **Alternative Setup**: Plan for alternative data sources if needed ### Disconnection Process 1. Go to **Settings** → **Integrations** → **Stripe** 2. Click **Disconnect Account** 3. Confirm the disconnection in the dialog 4. Review the disconnection summary ### What Happens After Disconnection * **Data Retention**: Existing data remains in your account * **Sync Stops**: No new data will be synchronized * **Webhooks**: Stripe webhooks are automatically disabled * **Access Revoked**: Integration permissions are revoked in Stripe ### Re-connecting You can reconnect your Stripe account at any time by following the connection process again. Historical data will be preserved and new syncing will resume. ## Data Access Policies ### Organization Data Access * **Scope**: Only data from your connected Stripe account * **Isolation**: Complete isolation between organizations * **Permissions**: Based on your Connect Tech Global role * **Audit Trail**: All access is logged and auditable ### User Permissions * **Admin**: Full integration management and data access * **Billing**: View financial data and manage billing integrations * **Member**: View data based on organization permissions * **Guest**: No integration access by default ### Data Export * **Format**: JSON, CSV, or Excel formats available * **Scope**: Export all or filtered data sets * **Scheduling**: Automated exports available * **Security**: Encrypted exports with access controls ### Data Deletion * **Request Process**: Submit deletion request through support * **Verification**: Identity verification required * **Timeline**: Deletion completed within 30 days * **Confirmation**: Written confirmation provided ## Compliance and Legal ### Privacy Policy Our integration complies with: * **GDPR**: European data protection regulations * **CCPA**: California consumer privacy act * **SOC 2**: Security and availability standards * **PCI DSS**: Payment card industry standards ### Data Processing Agreement * **Legal Basis**: Legitimate business interest * **Data Controller**: Your organization remains the controller * **Data Processor**: Connect Tech Global acts as processor * **Subprocessors**: Listed in our privacy policy ### Your Rights * **Access**: Request copies of your data * **Rectification**: Correct inaccurate data * **Erasure**: Request data deletion * **Portability**: Export data in standard formats * **Objection**: Object to certain processing activities ## Best Practices ### Security 1. **Regular Reviews**: Periodically review integration permissions 2. **Access Management**: Limit integration access to necessary users 3. **Monitoring**: Monitor sync logs and security alerts 4. **Updates**: Keep integration settings up to date ### Data Management 1. **Regular Syncs**: Don't disable automatic synchronization 2. **Data Validation**: Regularly verify data accuracy 3. **Backup Strategy**: Maintain independent data backups 4. **Retention Policies**: Set appropriate data retention periods ### Performance 1. **Sync Scheduling**: Schedule syncs during off-peak hours 2. **Data Volume**: Monitor and manage large data volumes 3. **Error Handling**: Address sync errors promptly 4. **Resource Planning**: Plan for integration resource usage ## Support and Resources ### Documentation * **API Reference**: Technical API documentation * **Integration Guides**: Step-by-step setup guides * **Best Practices**: Recommended configurations * **Troubleshooting**: Common issues and solutions ### Support Channels * **Email**: [support@connecttechglobal.com](mailto:support@connecttechglobal.com) * **Chat**: In-app support chat * **Phone**: Business hours support line * **Community**: User forums and discussions ### Training Resources * **Video Tutorials**: Step-by-step video guides * **Webinars**: Regular training sessions * **Documentation**: Comprehensive written guides * **Certification**: Integration specialist certification # Introduction Source: https://docs.connecttechglobal.co.uk/introduction Welcome to the home of your new documentation Hero Light Hero Dark ## Setting up The first step to world-class documentation is setting up your editing environments. Get your docs set up locally for easy development Preview your changes before you push to make sure they're perfect ## Make it yours Update your docs to your brand and add valuable content for the best user conversion. Customize your docs to your company's colors and brands Automatically generate endpoints from an OpenAPI spec Build interactive features and designs to guide your users Check out our showcase of our favorite documentation # Quickstart Source: https://docs.connecttechglobal.co.uk/quickstart Get started with CONNECT TECH GLOBAL services and APIs ## Getting Started with CONNECT TECH GLOBAL Welcome to our documentation! This guide will help you get up and running with our services quickly. Digital technology ## Our Services CONNECT TECH GLOBAL provides comprehensive technology solutions for modern businesses. ### Web Development High-performance Next.js applications built for modern businesses with cutting-edge technology. ### Managed Services Complete digital solutions including email, hosting, security, and ongoing support. ### AI Solutions Innovative AI-powered solutions designed to transform your business operations. ## Contact Us Ready to get started? Reach out to our team: * **Email**: [support@connecttechglobal.co.uk](mailto:support@connecttechglobal.co.uk) * **Website**: [connecttechglobal.co.uk](https://connecttechglobal.co.uk) * **App**: [app.connecttechglobal.co.uk](https://app.connecttechglobal.co.uk) ## Support Need help? Our support team is here to assist you: Send us an email for technical assistance Browse our comprehensive API documentation