LitmusEdge 4.0.x API Documentation/System/Network - LE, LEM, LUNS API Docs

Update Modem Configuration

PUT {{edgeUrl}}/dm/modem/{imei}

Update Modem Configuration

Sets the APN for a cellular modem identified by its IMEI.

Endpoint

PUT {{edgeUrl}}/dm/modem/{imei}

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Path parameters

Location Name Required Description
Path {imei} Yes Modem IMEI (from List Available Modems).

Request body

{ "apn": "broadband" }

Response

200 OK on success.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body

{
    "apn": "broadband"
}

Set System Clock

PUT {{edgeUrl}}/dm/host/clock

Set System Clock

Sets the device's wall-clock time manually. Use only on devices without NTP access; on NTP-synced devices, the next NTP poll overwrites the manual setting.

Endpoint

PUT {{edgeUrl}}/dm/host/clock

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Request body

{ "date": "1970-01-01", "time": "23:59:59" }

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body

{
    "date": "1970-01-01",
    "time": "23:59:59"
}

Set Country for WiFi Compliance

PUT {{edgeUrl}}/dm/host/country

Set Country for WiFi Compliance

Sets the device's regulatory country. Required for correct WiFi channel selection.

Endpoint

PUT {{edgeUrl}}/dm/host/country

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Request body

{ "country": "US" }
Field Type Required Description
country string Yes Two-letter ISO 3166-1 country code.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body

{
    "country": "US"
}

Set Friendly Host Name

PUT {{edgeUrl}}/dm/host/description

Set Friendly Host Name

Sets the device's free-form description (visible in the LE UI header, status pages, and inventory exports). Distinct from the kernel hostname.

Endpoint

PUT {{edgeUrl}}/dm/host/description

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Request body

{ "desc": "CA;ON;Toronto;1 Yonge Street" }

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body

{
    "desc": "CA;ON;Toronto;1 Yonge Street"
}

Set DNS Resolvers

PUT {{edgeUrl}}/dm/host/dns

Set DNS Resolvers

Configures the DNS resolvers the device uses. Replaces the current list completely.

Endpoint

PUT {{edgeUrl}}/dm/host/dns

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Request body

{
  "dns": [
    "8.8.8.8",
    "8.8.4.4",
    "2001:4860:4860::8888",
    "2001:4860:4860::8844"
  ]
}

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body

{
    "dns": [
        "8.8.8.8",
        "8.8.4.4",
        "2001:4860:4860::8888",
        "2001:4860:4860::8844"
    ]
}

Set Docker Config

PUT {{edgeUrl}}/dm/host/docker/config

Set Docker Config

Sets the Docker bridge IP/subnet used by edge applications. Changing the BIP restarts the Docker daemon -- every container restarts.

Endpoint

PUT {{edgeUrl}}/dm/host/docker/config

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Request body

{ "bip": "192.168.5.1/24" }
Field Type Required Description
bip string Yes Bridge IP with CIDR (e.g. 192.168.5.1/24).

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body

{
    "bip": "<Default Docker bridge network> 192.168.5.1/24"
}

Set User-Editable Part of /etc/hosts

PUT {{edgeUrl}}/dm/host/etcHosts

Set User-Editable Part of /etc/hosts

Replaces the user-editable region of /etc/hosts with the provided entries. Built-in system entries are preserved.

Endpoint

PUT {{edgeUrl}}/dm/host/etcHosts

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Request body

{
  "etcHosts": [
    { "address": "192.168.1.254", "names": "edge01.example.com edge01" }
  ]
}
Field Type Description
etcHosts[].address string IP address.
etcHosts[].names string Space-separated hostnames.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body

{
    "etcHosts": [
        {
            "address": "192.168.1.254",
            "names": "edge01.example.com edge01"
        },
        {
            "address": "192.168.1.254",
            "names": "edge01.example.com edge01"
        },
        {
            "address": "192.168.1.254",
            "names": "edge01.example.com edge01"
        }
    ]
}

Set NTP Servers

PUT {{edgeUrl}}/dm/host/ntp

Set NTP Servers

Configures the NTP servers the device synchronizes against. Replaces the current list completely.

Endpoint

PUT {{edgeUrl}}/dm/host/ntp

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Request body

{
  "ntp": [
    "0.pool.ntp.org",
    "1.pool.ntp.org",
    "2.pool.ntp.org",
    "3.pool.ntp.org"
  ]
}

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body

{
    "ntp": [
        "0.pool.ntp.org",
        "1.pool.ntp.org",
        "2.pool.ntp.org",
        "3.pool.ntp.org"
    ]
}

Set Timezone

PUT {{edgeUrl}}/dm/host/timezone

Set Timezone

Sets the device's IANA timezone. Use Network > List Available Timezones to enumerate legal values.

Endpoint

PUT {{edgeUrl}}/dm/host/timezone

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Request body

{ "timezone": "America/Toronto" }

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body

{
    "timezone": "America/Toronto"
}

Update Network Interface

PUT {{edgeUrl}}/dm/ifconfig/{name}

Update Network Interface

Re-configures one network interface (IPv4 + IPv6 + WAN flag). The change is applied immediately; existing connections on the interface may be reset.

Endpoint

PUT {{edgeUrl}}/dm/ifconfig/{name}

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Path parameters

Location Name Required Description
Path {name} Yes Interface name (e.g. eth0).

Request body

{
  "inet": { "address": "10.0.0.2/24", "gateway": "10.0.0.1", "type": "static" },
  "inet6": { "address": "2001:dead:beef::2/64", "gateway": "2001:dead:beef::1", "type": "static" },
  "wan": true
}
Field Type Description
inet.type string dhcp or static. When static, address and gateway are required.
inet.address string IPv4 with CIDR mask.
inet.gateway string IPv4 gateway address.
inet6.* mixed Same shape for IPv6. type can be auto, static, or empty.
wan boolean true if this interface is the WAN uplink.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body

{
    "inet": {
        "address": "10.0.0.2/24",
        "gateway": "10.0.0.1",
        "type": "static"
    },
    "inet6": {
        "address": "2001:dead:beef::2/64",
        "gateway": "2001:dead:beef::1",
        "type": "static"
    },
    "wan": true
}

Update Interface/s

PUT {{edgeUrl}}/dm/ifconfig/eth0

Update Interface/s

Alternate form of Configure > Update Network Interface. The Postman item targets eth0 specifically and submits the full interface record -- including read-only fields like idx and name -- which are ignored on the server side.

Endpoint

PUT {{edgeUrl}}/dm/ifconfig/eth0

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Request body

{
  "idx": 3,
  "inet": { "address": "10.17.3.238/22", "gateway": "10.17.0.1", "type": "dhcp" },
  "inet6": { "address": "fe80::250:56ff:feb9:afd3/64", "type": "auto" },
  "name": "eth0",
  "wan": true
}

Use Configure > Update Network Interface for new code paths; the shorter shape there is the canonical form.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body

{
    "idx": 3,
    "inet": {
        "address": "10.17.3.238/22",
        "gateway": "10.17.0.1",
        "type": "dhcp"
    },
    "inet6": {
        "address": "fe80::250:56ff:feb9:afd3/64",
        "type": "auto"
    },
    "name": "eth0",
    "wan": true
}

Response

Status: 204 No Content


Get Firewall Rules

GET {{edgeUrl}}/dm/firewall

Get Firewall Rules

Lists every user-defined firewall rule on the device. Built-in system rules are not returned by this endpoint.

Endpoint

GET {{edgeUrl}}/dm/firewall

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Response

200 OK -- application/json. Array of firewall-rule objects.

Field Type Description
id string Rule UUID.
desc string Operator description.
iface string Interface the rule applies on (e.g. eth0).
policy string ALLOW or DENY.
port string Port number or range (2233 or 2200-2299).
protocol string tcp or udp.
[
  {
    "desc": "api firewall",
    "id": "057feac1-e8db-4337-ab5e-20ef1db07ab8",
    "iface": "eth0",
    "policy": "ALLOW",
    "port": "2233",
    "protocol": "tcp"
  }
]

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

[
    {
        "desc": "api firewall",
        "id": "057feac1-e8db-4337-ab5e-20ef1db07ab8",
        "iface": "eth0",
        "policy": "ALLOW",
        "port": "2233",
        "protocol": "tcp"
    }
]

Create Firewall Rule

POST {{edgeUrl}}/dm/firewall

Create Firewall Rule

Adds a new firewall rule. Rules are evaluated in order; later rules take precedence over earlier matches.

Endpoint

POST {{edgeUrl}}/dm/firewall

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Request body

{
  "desc": "api firewall",
  "iface": "eth0",
  "policy": "ALLOW",
  "port": "2233",
  "protocol": "tcp"
}
Field Type Required Description
desc string Yes Free-form description shown in the UI.
iface string Yes Interface the rule applies to.
policy string Yes ALLOW or DENY.
port string Yes Single port or a range (2200-2299).
protocol string Yes tcp or udp.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body

{
  "desc": "api firewall",
  "iface": "eth0",
  "policy": "ALLOW",
  "port": "2233",
  "protocol": "tcp"
}

Response

Status: 204 No Content


Change Firewall Rule

PUT {{edgeUrl}}/dm/firewall/{{firewall-rule-id}}

Change Firewall Rule

Updates an existing firewall rule by ID. Send the full record; omitted fields are reset.

Endpoint

PUT {{edgeUrl}}/dm/firewall/{{firewall-rule-id}}

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Request body

{
  "id": "{{firewall-rule-id}}",
  "desc": "api modifies firewall",
  "iface": "eth0",
  "policy": "ALLOW",
  "port": "2233",
  "protocol": "tcp"
}

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body

{
  "desc": "api modifies firewall",
  "id": "{{firewall-rule-id}}",
  "iface": "eth0",
  "policy": "ALLOW",
  "port": "2233",
  "protocol": "tcp"
}

Response

Status: 204 No Content


Delete Firewall Rule

DELETE {{edgeUrl}}/dm/firewall/{{firewall-rule-id}}

Delete Firewall Rule

Removes a firewall rule by UUID.

Endpoint

DELETE {{edgeUrl}}/dm/firewall/{{firewall-rule-id}}

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Path parameters

Location Name Required Description
Path {{firewall-rule-id}} Yes Rule UUID from Get Firewall Rules.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 204 No Content


Get Device Certificate

GET {{edgeUrl}}/dm/deviceinfo/crt

Get Device Certificate

Returns metadata for the device server certificate -- the TLS cert the LE web UI and APIs are served behind. Use after Add Device Certificate to confirm the new cert took effect.

Endpoint

GET {{edgeUrl}}/dm/deviceinfo/crt

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Response

200 OK -- application/json

{
  "issuer": "litmus-edge-94c6911b9c77",
  "notAfter": "2029-02-22T21:39:00Z",
  "notBefore": "2022-02-21T21:39:00Z",
  "subject": "litmus-edge-94c6911b9c77"
}

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

{
    "issuer": "litmus-edge-94c6911b9c77",
    "notAfter": "2029-02-22T21:39:00Z",
    "notBefore": "2022-02-21T21:39:00Z",
    "subject": "litmus-edge-94c6911b9c77"
}

Get Custom CA Certificates

GET {{edgeUrl}}/dm/certstore

Get Custom CA Certificates

Returns the custom CA certificates installed in the device's trust store. Useful when the device needs to talk to enterprise services fronted by an internal CA.

Endpoint

GET {{edgeUrl}}/dm/certstore

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Response

200 OK -- application/json. Array of CA certificate objects.

Field Type Description
id string Certificate fingerprint (SHA256 hex).
issuer / subject string DN strings.
notBefore / notAfter string Validity window.
signatureAlgorithm string Signature algorithm (e.g. SHA256-RSA).
isValid / isWeak boolean Validity flags.
trustChain object[] Chain back to the trust anchor.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

[
    {
        "id": "11:aa:bb:22:3c:4d:5e:6f:7a:8b:9c:1d:2e:3f:11:aa:bb:22:3c:4d:5e:6f:7a:8b:9c:1d:2e:3f:11:aa:bb:22",
        "isValid": true,
        "isWeak": false,
        "issuer": "ISRG Root X1",
        "notAfter": "2025-09-15T16:00:00Z",
        "notBefore": "2020-09-04T00:00:00Z",
        "signatureAlgorithm": "SHA256-RSA",
        "subject": "R3",
        "trustChain": [
            {
                "id": "",
                "issuer": "ISRG Root X1",
                "notAfter": "2025-09-15T16:00:00Z",
                "notBefore": "2020-09-04T00:00:00Z",
                "subject": "R3"
            }
        ]
    }
]

Step 1 : Upload Custom CA Certificate

POST {{edgeUrl}}/dm/certstore

Step 1: Upload Custom CA Certificate

First step in the two-step CA-cert upload flow. Declares the size of the certificate file to upload. The response includes an upload session ID used in step 2.

Endpoint

POST {{edgeUrl}}/dm/certstore

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Request body

{ "size": 1228 }

Response

200 OK -- application/json

{ "id": "0ba421eb-5055-11f0-b38b-005056b9b678" }

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body

{
    "size": 1228
}

Response

Status: 200 OK

{
    "id": "0ba421eb-5055-11f0-b38b-005056b9b678"
}

Step 2: Upload Custom Certificate

PUT {{edgeUrl}}/dm/certstore/{step1_upload_id}

Step 2: Upload Custom Certificate

Uploads the actual CA certificate file in the session created by step 1. The cert is added to the device's trust store on success.

Endpoint

PUT {{edgeUrl}}/dm/certstore/{step1_upload_id}

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Path parameters

Location Name Required Description
Path {step1_upload_id} Yes Session UUID from step 1.

Request body (multipart form-data)

Form key Type Description
uploadFile file CA certificate file (PEM or DER).

Response

200 OK once the upload is complete and the cert has been added to the trust store.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body


Add Device Certificate

POST {{edgeUrl}}/dm/deviceinfo/crt

Add Device Certificate

Installs a new device server certificate (the one the LE web UI is served behind). Replaces the self-signed certificate that ships by default. Requires the full chain plus the private key.

After installation, web/API connections are re-established with the new certificate; existing TLS sessions may need to reconnect.

Endpoint

POST {{edgeUrl}}/dm/deviceinfo/crt

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Request body

{
  "caChain": "Server certificate CA chain",
  "cert": "Server certificate",
  "certKey": "Server certificate private key"
}
Field Type Required Description
cert string Yes PEM-encoded leaf certificate.
caChain string Yes PEM-encoded CA chain (root + intermediates).
certKey string Yes PEM-encoded private key matching cert.

Sensitive data: certKey should be transferred over HTTPS only.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body

{
    "caChain" : "Server certificate CA chain",
    "cert": "Server certificate",
    "certKey": "Server certificate private key"
}

Reset Device Certificate with Self Signed

PUT {{edgeUrl}}/dm/deviceinfo/crt/reset

Reset Device Certificate with Self Signed

Reverts the device server certificate to the self-signed certificate that ships by default. Useful when the installed custom certificate has expired or is causing TLS issues.

Endpoint

PUT {{edgeUrl}}/dm/deviceinfo/crt/reset

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Response

200 OK on success.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 204 No Content


Get CSR

GET {{edgeUrl}}/dm/deviceinfo/csr

Get CSR

Generates a Certificate Signing Request (CSR) using the device's existing private key. Submit the CSR to your CA to obtain a signed certificate, then install via Add Device Certificate.

Endpoint

GET {{edgeUrl}}/dm/deviceinfo/csr

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Response

200 OK -- application/json

{
  "csr": "-----BEGIN CERTIFICATE REQUEST-----...-----END CERTIFICATE REQUEST-----\n"
}

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

{
    "csr": "-----BEGIN CERTIFICATE REQUEST-----SOMETHING HERE-----END CERTIFICATE REQUEST-----\n"
}

Show Device Identity

GET {{edgeUrl}}/dm/deviceinfo/identity

Show Device Identity

Returns the device's identity public key in PEM form. Use to verify a device's identity from an external system or to install on a CA-issued identity certificate.

Endpoint

GET {{edgeUrl}}/dm/deviceinfo/identity

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Response

200 OK -- application/json

{ "pubKey": "-----BEGIN PUBLIC KEY-----...-----END PUBLIC KEY-----\n" }

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

{
    "pubKey": "-----BEGIN PUBLIC KEY-----PUBLIC KEY HERE-----END PUBLIC KEY-----\n"
}

Get Identity Certificates

GET {{edgeUrl}}/dm/deviceinfo/identity/crt

Get Identity Certificates

Returns the identity certificates installed on the device. These are separate from the device server certificate and are used for authenticating the device to upstream systems (e.g. LE Manager, mTLS-protected services).

Endpoint

GET {{edgeUrl}}/dm/deviceinfo/identity/crt

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Response

200 OK -- application/json. Array of identity-certificate objects.

Field Type Description
id string Certificate fingerprint.
certificate string PEM-encoded certificate.
caChain string PEM-encoded CA chain.
issuer / subject string DN strings.
notBefore / notAfter string Validity window.
canDelete boolean false for system-managed certs (e.g. LE Manager issued).

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

[
    {
        "caChain": "-----BEGIN CERTIFICATE-----SOMETHING HERE-----END CERTIFICATE-----",
        "canDelete": false,
        "certificate": "-----BEGIN CERTIFICATE-----SOMETHING HERE-----END CERTIFICATE-----",
        "id": "11:aa:bb:22:3c:4d:5e:6f:7a:8b:9c:1d:2e:3f:11:aa:bb:22:3c:4d:5e:6f:7a:8b:9c:1d:2e:3f:11:aa:bb:22",
        "issuer": "Litmus Edge Manager CA",
        "notAfter": "2024-05-21T19:07:28Z",
        "notBefore": "2023-05-22T19:06:58Z",
        "subject": "2ea9g28plimcks2kma5g8x2me"
    }
]

Install Identity Certificate

POST {{edgeUrl}}/dm/deviceinfo/identity/crt

Install Identity Certificate

Installs a new identity certificate (signed by a CA against the CSR from Show Device Identity). Once installed, the device can present this certificate to upstream services.

Endpoint

POST {{edgeUrl}}/dm/deviceinfo/identity/crt

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Request body

{
  "cert": "Identity certificate",
  "caChain": "Identity certificate CA chain"
}
Field Type Required Description
cert string Yes PEM-encoded leaf certificate.
caChain string Yes PEM-encoded CA chain.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body

{
"caChain": "Identity certificate CA chain",
"cert": "Identity certificate"
}

Delete Identity Certificate

DELETE {{edgeUrl}}/dm/deviceinfo/identity/crt/{id}

Delete Identity Certificate

Removes an identity certificate by ID. System-managed certificates (canDelete: false) cannot be removed.

Endpoint

DELETE {{edgeUrl}}/dm/deviceinfo/identity/crt/{id}

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Path parameters

Location Name Required Description
Path {id} Yes Certificate ID from Get Identity Certificates.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body

{
"caChain": "Identity certificate CA chain",
"cert": "Identity certificate"
}

Packet Capture Interfaces

GET {{edgeUrl}}/networkutil/packetcapture/interfaces

Packet Capture Interfaces

Returns the network interfaces eligible for packet capture, plus the special any pseudo-interface that captures across all interfaces.

Endpoint

GET {{edgeUrl}}/networkutil/packetcapture/interfaces

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Response

200 OK -- application/json

{ "interfaces": ["eth0", "any"] }

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

{
    "interfaces": [
        "eth0",
        "any"
    ]
}

Packet Capture Status

GET {{edgeUrl}}/networkutil/packetcapture

Packet Capture Status

Returns whether a packet capture is currently running and, if so, when it will complete.

Endpoint

GET {{edgeUrl}}/networkutil/packetcapture

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Response

200 OK -- application/json

Field Type Description
capturing boolean true while a capture is in progress.
completiontime string Scheduled completion time, or empty when idle.
{ "capturing": false, "completiontime": "" }

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

{
    "capturing": false,
    "completiontime": ""
}

Start Packet Capture

POST {{edgeUrl}}/networkutil/packetcapture

Start Packet Capture

Starts a new packet capture on the given interface for the given duration. Only one capture can run at a time; calling while one is already running returns an error.

Endpoint

POST {{edgeUrl}}/networkutil/packetcapture

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Request body

{ "interface": "eth0", "duration": "1" }
Field Type Required Description
interface string Yes Interface from Packet Capture Interfaces (or any).
duration string Yes Duration in minutes (string).

Response

200 OK -- application/json

{ "capturing": true, "completiontime": "2024-07-30 15:18" }

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

Recovering the capture file

The capture file is exposed for download via the LE UI's network diagnostics page; this API only starts/stops the capture.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body

{
    "interface": "eth0",
    "duration": "1"
}

Response

Status: 200 OK

{
    "capturing": true,
    "completiontime": "2024-07-30 15:18"
}

Stop Packet Capture

DELETE {{edgeUrl}}/networkutil/packetcapture

Stop Packet Capture

Stops the currently-running packet capture. Idempotent when no capture is active.

Endpoint

DELETE {{edgeUrl}}/networkutil/packetcapture

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Response

200 OK -- application/json

{ "capturing": false, "completiontime": "" }

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

{
    "capturing": false,
    "completiontime": ""
}

Get WiFi Interfaces

GET {{edgeUrl}}/dm/wifi/interfaces

Get WiFi Interfaces

Returns every WiFi-capable interface on the device, with the currently connected network (if any) and its signal strength.

Endpoint

GET {{edgeUrl}}/dm/wifi/interfaces

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Response

200 OK -- application/json. Array of WiFi interface objects.

Field Type Description
name string Interface name (e.g. wlan0).
state string CONNECTED, DISCONNECTED, SCANNING, ...
currentNetwork.ssid string Connected SSID, when applicable.
currentNetwork.signalBars / signalRSSI integer Signal level (0-4 bars, raw RSSI in dBm).
currentNetwork.band / channel / frequencyMHz mixed Band info.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

[
    {
        "currentNetwork": {
            "band": 5,
            "channel": 44,
            "frequencyMHz": 5220,
            "signalBars": 4,
            "signalRSSI": -56,
            "ssid": "LitmusAutomation-Internal"
        },
        "name": "wlan0",
        "state": "CONNECTED"
    },
    {
        "currentNetwork": {
            "band": 5,
            "channel": 44,
            "frequencyMHz": 5220,
            "signalBars": 4,
            "signalRSSI": -56,
            "ssid": "LitmusAutomation-Internal"
        },
        "name": "wlan0",
        "state": "CONNECTED"
    }
]

Get Interface Status by Name

GET {{edgeUrl}}/dm/wifi/interfaces/{ifname}

Get Interface Status by Name

Returns the WiFi status of one named interface. Single-interface counterpart to Get WiFi Interfaces.

Endpoint

GET {{edgeUrl}}/dm/wifi/interfaces/{ifname}

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Path parameters

Location Name Required Description
Path {ifname} Yes WiFi interface name.

Response

See Get WiFi Interfaces.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

{
    "currentNetwork": {
        "band": 5,
        "channel": 44,
        "frequencyMHz": 5220,
        "signalBars": 4,
        "signalRSSI": -56,
        "ssid": "LitmusAutomation-Internal"
    },
    "name": "wlan0",
    "state": "CONNECTED"
}

Leave Current Network

DELETE {{edgeUrl}}/dm/wifi/interfaces/{ifname}

Leave Current Network

Disconnects the WiFi interface from its current network. The network's known-networks entry is preserved -- use Forget Network to remove it permanently.

Endpoint

DELETE {{edgeUrl}}/dm/wifi/interfaces/{ifname}

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Path parameters

Location Name Required Description
Path {ifname} Yes WiFi interface name.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.


List Networks in Interface

GET {{edgeUrl}}/dm/wifi/interfaces/{ifname}/networks

List Networks in Interface

Scans the named WiFi interface and returns the visible SSIDs with signal strength. The scan is triggered on each call (may take a few seconds).

Endpoint

GET {{edgeUrl}}/dm/wifi/interfaces/{ifname}/networks

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Path parameters

Location Name Required Description
Path {ifname} Yes WiFi interface name.

Response

200 OK -- application/json. Array of network objects.

Field Type Description
ssid string Network SSID.
signalBars integer Signal level (0-4).
signalRSSI integer RSSI in dBm.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

[
    {
        "signalBars": 4,
        "signalRSSI": -56,
        "ssid": "LitmusAutomation-Internal"
    },
    {
        "signalBars": 4,
        "signalRSSI": -56,
        "ssid": "LitmusAutomation-Internal"
    }
]

Connect to WiFi Network

POST {{edgeUrl}}/dm/wifi/interfaces/{ifname}/networks/{ssid}

Connect to WiFi Network

Connects to an open WiFi network. For password-protected networks use Connect to WiFi with Password.

Endpoint

POST {{edgeUrl}}/dm/wifi/interfaces/{ifname}/networks/{ssid}

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Path parameters

Location Name Required Description
Path {ifname} Yes WiFi interface name.
Path {ssid} Yes Network SSID (URL-encode if it contains special characters).

No request body.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.


Connect to WiFi with Password

POST {{edgeUrl}}/dm/wifi/interfaces/{ifname}/networks/{ssid}/withPassword

Connect to WiFi with Password

Connects to a password-protected WiFi network. The password is sent in the request body -- ensure the request is over HTTPS.

Endpoint

POST {{edgeUrl}}/dm/wifi/interfaces/{ifname}/networks/{ssid}/withPassword

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Path parameters

Location Name Required Description
Path {ifname} Yes WiFi interface name.
Path {ssid} Yes Network SSID.

Request body

{ "password": "Password" }

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Request Body

{
    "password": "Password"
}

List Known Networks

GET {{edgeUrl}}/dm/wifi/knownNetworks

List Known Networks

Returns every WiFi network the device has been previously joined to. The device may auto-connect to known networks when in range.

Endpoint

GET {{edgeUrl}}/dm/wifi/knownNetworks

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Response

200 OK -- application/json. Array of {ssid, signalBars, signalRSSI} objects.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

[
    {
        "signalBars": 4,
        "signalRSSI": -56,
        "ssid": "LitmusAutomation-Internal"
    },
    {
        "signalBars": 4,
        "signalRSSI": -56,
        "ssid": "LitmusAutomation-Internal"
    }
]

Forget Network

DELETE {{edgeUrl}}/dm/wifi/knownNetworks/{ssid}

Forget Network

Removes a known network entry. Saved credentials are wiped; the device will not auto-connect to that SSID again.

Endpoint

DELETE {{edgeUrl}}/dm/wifi/knownNetworks/{ssid}

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Path parameters

Location Name Required Description
Path {ssid} Yes Network SSID.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.


Host Device Network Info

GET {{edgeUrl}}/dm/host/info

Host Device Network Info

Returns the device's host-level network identity: hostname, DNS / NTP servers, gateway, Docker bridge IP, timezone, country, and the user-editable /etc/hosts overrides. Same payload as Dashboard > Host Device Info.

Endpoint

GET {{edgeUrl}}/dm/host/info

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Response

See Dashboard > Host Device Info for the full field reference.

{
  "country": "US",
  "dns": ["8.8.8.8", "8.8.4.4"],
  "docker": { "bip": "10.30.50.1/24" },
  "etcHosts": null,
  "gateway": { "ipv4": "10.17.8.1" },
  "hostname": "litmus-edge-aabbccddeeff",
  "ntp": ["0.pool.ntp.org", "1.pool.ntp.org"],
  "timezone": "UTC"
}

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

{
    "country": "US",
    "description": "Litmus Edge (aa:bb:cc:dd:ee:ff)- SJ sensor",
    "dns": [
        "8.8.8.8",
        "8.8.4.4"
    ],
    "docker": {
        "bip": "10.30.50.1/24"
    },
    "etcHosts": null,
    "gateway": {
        "ipv4": "10.17.8.1"
    },
    "hostname": "litmus-edge-aabbccddeeff",
    "ntp": [
        "0.pool.ntp.org",
        "1.pool.ntp.org",
        "2.pool.ntp.org"
    ],
    "timezone": "UTC"
}

List Available Timezones

GET {{edgeUrl}}/dm/host/timezones

List Available Timezones

Returns every IANA timezone name supported by the device. Use to populate a timezone picker before calling Network > Configure > Set Timezone.

Endpoint

GET {{edgeUrl}}/dm/host/timezones

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Response

200 OK -- application/json

{
  "timezones": [
    "Africa/Abidjan", "Africa/Algiers", "America/Los_Angeles", "Europe/London", "UTC"
  ]
}

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

{
    "timezones": [
        "Africa/Abidjan",
        "Africa/Algiers",
        "Africa/Bissau",
        "Africa/Cairo",
        "Africa/Casablanca",
        "Africa/Ceuta",
        "Africa/El_Aaiun",
        "Africa/Johannesburg",
        "Africa/Juba",
        "Africa/Khartoum",
        "Africa/Lagos",
        "Africa/Maputo",
        "Africa/Monrovia",
        "Africa/Nairobi",
        "Africa/Ndjamena",
        "Africa/Sao_Tome",
        "Africa/Tripoli",
        "Africa/Tunis",
        "Africa/Windhoek",
        "America/Adak",
        "America/Anchorage",
        "America/Araguaina",
        "America/Argentina/Buenos_Aires",
        "America/Argentina/Catamarca",
        "America/Argentina/Cordoba",
        "America/Argentina/Jujuy",
        "America/Argentina/La_Rioja",
        "America/Argentina/Mendoza",
        "America/Argentina/Rio_Gallegos",
        "America/Argentina/Salta",
        "America/Argentina/San_Juan",
        "America/Argentina/San_Luis",
        "America/Argentina/Tucuman",
        "America/Argentina/Ushuaia",
        "America/Asuncion",
        "America/Bahia",
        "America/Bahia_Banderas",
        "America/Barbados",
        "America/Belem",
        "America/Belize",
        "America/Boa_Vista",
        "America/Bogota",
        "America/Boise",
        "America/Cambridge_Bay",
        "America/Campo_Grande",
        "America/Cancun",
        "America/Caracas",
        "America/Cayenne",
        "America/Chicago",
        "America/Chihuahua",
        "America/Ciudad_Juarez",
        "America/Costa_Rica",
        "America/Cuiaba",
        "America/Danmarkshavn",
        "America/Dawson",
        "America/Dawson_Creek",
        "America/Denver",
        "America/Detroit",
        "America/Edmonton",
        "America/Eirunepe",
        "America/El_Salvador",
        "America/Fort_Nelson",
        "America/Fortaleza",
        "America/Glace_Bay",
        "America/Goose_Bay",
        "America/Grand_Turk",
        "America/Guatemala",
        "America/Guayaquil",
        "America/Guyana",
        "America/Halifax",
        "America/Havana",
        "America/Hermosillo",
        "America/Indiana/Indianapolis",
        "America/Indiana/Knox",
        "America/Indiana/Marengo",
        "America/Indiana/Petersburg",
        "America/Indiana/Tell_City",
        "America/Indiana/Vevay",
        "America/Indiana/Vincennes",
        "America/Indiana/Winamac",
        "America/Inuvik",
        "America/Iqaluit",
        "America/Jamaica",
        "America/Juneau",
        "America/Kentucky/Louisville",
        "America/Kentucky/Monticello",
        "America/La_Paz",
        "America/Lima",
        "America/Los_Angeles",
        "America/Maceio",
        "America/Managua",
        "America/Manaus",
        "America/Martinique",
        "America/Matamoros",
        "America/Mazatlan",
        "America/Menominee",
        "America/Merida",
        "America/Metlakatla",
        "America/Mexico_City",
        "America/Miquelon",
        "America/Moncton",
        "America/Monterrey",
        "America/Montevideo",
        "America/New_York",
        "America/Nome",
        "America/Noronha",
        "America/North_Dakota/Beulah",
        "America/North_Dakota/Center",
        "America/North_Dakota/New_Salem",
        "America/Nuuk",
        "America/Ojinaga",
        "America/Panama",
        "America/Paramaribo",
        "America/Phoenix",
        "America/Port-au-Prince",
        "America/Porto_Velho",
        "America/Puerto_Rico",
        "America/Punta_Arenas",
        "America/Rankin_Inlet",
        "America/Recife",
        "America/Regina",
        "America/Resolute",
        "America/Rio_Branco",
        "America/Santarem",
        "America/Santiago",
        "America/Santo_Domingo",
        "America/Sao_Paulo",
        "America/Scoresbysund",
        "America/Sitka",
        "America/St_Johns",
        "America/Swift_Current",
        "America/Tegucigalpa",
        "America/Thule",
        "America/Tijuana",
        "America/Toronto",
        "America/Vancouver",
        "America/Whitehorse",
        "America/Winnipeg",
        "America/Yakutat",
        "America/Yellowknife",
        "Antarctica/Casey",
        "Antarctica/Davis",
        "Antarctica/Macquarie",
        "Antarctica/Mawson",
        "Antarctica/Palmer",
        "Antarctica/Rothera",
        "Antarctica/Troll",
        "Asia/Almaty",
        "Asia/Amman",
        "Asia/Anadyr",
        "Asia/Aqtau",
        "Asia/Aqtobe",
        "Asia/Ashgabat",
        "Asia/Atyrau",
        "Asia/Baghdad",
        "Asia/Baku",
        "Asia/Bangkok",
        "Asia/Barnaul",
        "Asia/Beirut",
        "Asia/Bishkek",
        "Asia/Chita",
        "Asia/Choibalsan",
        "Asia/Colombo",
        "Asia/Damascus",
        "Asia/Dhaka",
        "Asia/Dili",
        "Asia/Dubai",
        "Asia/Dushanbe",
        "Asia/Famagusta",
        "Asia/Gaza",
        "Asia/Hebron",
        "Asia/Ho_Chi_Minh",
        "Asia/Hong_Kong",
        "Asia/Hovd",
        "Asia/Irkutsk",
        "Asia/Jakarta",
        "Asia/Jayapura",
        "Asia/Jerusalem",
        "Asia/Kabul",
        "Asia/Kamchatka",
        "Asia/Karachi",
        "Asia/Kathmandu",
        "Asia/Khandyga",
        "Asia/Kolkata",
        "Asia/Krasnoyarsk",
        "Asia/Kuching",
        "Asia/Macau",
        "Asia/Magadan",
        "Asia/Makassar",
        "Asia/Manila",
        "Asia/Nicosia",
        "Asia/Novokuznetsk",
        "Asia/Novosibirsk",
        "Asia/Omsk",
        "Asia/Oral",
        "Asia/Pontianak",
        "Asia/Pyongyang",
        "Asia/Qatar",
        "Asia/Qostanay",
        "Asia/Qyzylorda",
        "Asia/Riyadh",
        "Asia/Sakhalin",
        "Asia/Samarkand",
        "Asia/Seoul",
        "Asia/Shanghai",
        "Asia/Singapore",
        "Asia/Srednekolymsk",
        "Asia/Taipei",
        "Asia/Tashkent",
        "Asia/Tbilisi",
        "Asia/Tehran",
        "Asia/Thimphu",
        "Asia/Tokyo",
        "Asia/Tomsk",
        "Asia/Ulaanbaatar",
        "Asia/Urumqi",
        "Asia/Ust-Nera",
        "Asia/Vladivostok",
        "Asia/Yakutsk",
        "Asia/Yangon",
        "Asia/Yekaterinburg",
        "Asia/Yerevan",
        "Atlantic/Azores",
        "Atlantic/Bermuda",
        "Atlantic/Canary",
        "Atlantic/Cape_Verde",
        "Atlantic/Faroe",
        "Atlantic/Madeira",
        "Atlantic/South_Georgia",
        "Atlantic/Stanley",
        "Australia/Adelaide",
        "Australia/Brisbane",
        "Australia/Broken_Hill",
        "Australia/Darwin",
        "Australia/Eucla",
        "Australia/Hobart",
        "Australia/Lindeman",
        "Australia/Lord_Howe",
        "Australia/Melbourne",
        "Australia/Perth",
        "Australia/Sydney",
        "Europe/Andorra",
        "Europe/Astrakhan",
        "Europe/Athens",
        "Europe/Belgrade",
        "Europe/Berlin",
        "Europe/Brussels",
        "Europe/Bucharest",
        "Europe/Budapest",
        "Europe/Chisinau",
        "Europe/Dublin",
        "Europe/Gibraltar",
        "Europe/Helsinki",
        "Europe/Istanbul",
        "Europe/Kaliningrad",
        "Europe/Kirov",
        "Europe/Kyiv",
        "Europe/Lisbon",
        "Europe/London",
        "Europe/Madrid",
        "Europe/Malta",
        "Europe/Minsk",
        "Europe/Moscow",
        "Europe/Paris",
        "Europe/Prague",
        "Europe/Riga",
        "Europe/Rome",
        "Europe/Samara",
        "Europe/Saratov",
        "Europe/Simferopol",
        "Europe/Sofia",
        "Europe/Tallinn",
        "Europe/Tirane",
        "Europe/Ulyanovsk",
        "Europe/Vienna",
        "Europe/Vilnius",
        "Europe/Volgograd",
        "Europe/Warsaw",
        "Europe/Zurich",
        "Indian/Chagos",
        "Indian/Maldives",
        "Indian/Mauritius",
        "Pacific/Apia",
        "Pacific/Auckland",
        "Pacific/Bougainville",
        "Pacific/Chatham",
        "Pacific/Easter",
        "Pacific/Efate",
        "Pacific/Fakaofo",
        "Pacific/Fiji",
        "Pacific/Galapagos",
        "Pacific/Gambier",
        "Pacific/Guadalcanal",
        "Pacific/Guam",
        "Pacific/Honolulu",
        "Pacific/Kanton",
        "Pacific/Kiritimati",
        "Pacific/Kosrae",
        "Pacific/Kwajalein",
        "Pacific/Marquesas",
        "Pacific/Nauru",
        "Pacific/Niue",
        "Pacific/Norfolk",
        "Pacific/Noumea",
        "Pacific/Pago_Pago",
        "Pacific/Palau",
        "Pacific/Pitcairn",
        "Pacific/Port_Moresby",
        "Pacific/Rarotonga",
        "Pacific/Tahiti",
        "Pacific/Tarawa",
        "Pacific/Tongatapu",
        "UTC"
    ]
}

Network Interface Configuration

GET {{edgeUrl}}/dm/ifconfig

Network Interface Configuration

Returns the IP configuration of every network interface (IPv4 + IPv6, DHCP vs static, gateway, WAN flag). Used by the LE UI's Network page.

Endpoint

GET {{edgeUrl}}/dm/ifconfig

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Response

200 OK -- application/json. Array of interface objects.

Field Type Description
idx integer Kernel interface index.
name string Interface name (e.g. eth0).
type string Link type (eth, wlan, wwan).
wan boolean true if this interface is considered the WAN uplink.
inet.address string IPv4 address with CIDR mask.
inet.gateway string IPv4 gateway. Empty for DHCP unless overridden.
inet.type string dhcp or static.
inet6.* mixed Same fields for IPv6 (type can be auto).

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

[
    {
        "idx": 2,
        "inet": {
            "address": "10.17.10.18/22",
            "gateway": "",
            "type": "dhcp"
        },
        "inet6": {
            "address": "fe80::96c6:91ff:fe1b:9c77/64",
            "gateway": "",
            "type": "auto"
        },
        "name": "eth0",
        "type": "eth",
        "wan": true
    },
    {
        "idx": 4,
        "inet": {
            "address": "",
            "gateway": "",
            "type": "dhcp"
        },
        "inet6": {
            "address": "",
            "gateway": "",
            "type": "auto"
        },
        "name": "wlan0",
        "type": "wifi",
        "wan": false
    }
]

Details of Network Interface

GET {{edgeUrl}}/dm/ifconfig/{name}

Details of Network Interface

Returns the IP configuration of one named interface. Single-interface counterpart to Network Interface Configuration.

Endpoint

GET {{edgeUrl}}/dm/ifconfig/{name}

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Path parameters

Location Name Required Description
Path {name} Yes Interface name (e.g. eth0).

Response

See Network Interface Configuration for the field reference.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

{
    "idx": 2,
    "inet": {
        "address": "10.17.10.18/22",
        "gateway": "",
        "type": "dhcp"
    },
    "inet6": {
        "address": "fe80::96c6:91ff:fe1b:9c77/64",
        "gateway": "",
        "type": "auto"
    },
    "name": "eth0",
    "type": "eth",
    "wan": true
}

List Available Modems

GET {{edgeUrl}}/dm/modem

List Available Modems

Returns the cellular modems the device knows about, with the carrier APN and IMEI. Subset of Info > Mobile Broadband Info.

Endpoint

GET {{edgeUrl}}/dm/modem

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Response

200 OK -- application/json

[
  { "apn": "broadband", "imei": "014666000090318" }
]

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

[
    {
        "apn": "broadband",
        "imei": "014666000090318"
    },
    {
        "apn": "broadband",
        "imei": "014666000090318"
    }
]

Get Host Time

GET {{edgeUrl}}/dm/host/time

Get Host Time

Returns the device's host time -- current date / time, NTP sync flag, and uptime. Useful for clock-skew diagnostics.

Endpoint

GET {{edgeUrl}}/dm/host/time

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Response

200 OK -- application/json

Field Type Description
dateTime object {date, time, tz, offset} -- the wall-clock view.
epoch integer Unix epoch seconds.
local / utc string ISO 8601 local / UTC timestamps.
ntpSync boolean true if NTP synchronization is currently healthy.
uptime object {years, days, hours, minutes, seconds, raw} since boot.
{
  "dateTime": { "date": "2023-08-03", "time": "22:46:53", "tz": "UTC", "offset": 0 },
  "epoch": 1691102813,
  "local": "2023-08-03T22:46:53Z",
  "ntpSync": false,
  "uptime": { "days": 26, "hours": 7, "minutes": 19, "raw": 2272746, "seconds": 6, "years": 0 },
  "utc": "2023-08-03T22:46:53Z"
}

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

{
    "dateTime": {
        "date": "2023-08-03",
        "offset": 0,
        "time": "22:46:53",
        "tz": "UTC"
    },
    "epoch": 1691102813,
    "local": "2023-08-03T22:46:53Z",
    "ntpSync": false,
    "uptime": {
        "days": 26,
        "hours": 7,
        "minutes": 19,
        "raw": 2272746,
        "seconds": 6,
        "years": 0
    },
    "utc": "2023-08-03T22:46:53Z"
}

Mobile Broadband Info

GET {{edgeUrl}}/dm/deviceinfo/modem

Mobile Broadband Info

Identical endpoint to Info > Mobile Broadband Info -- exposed under Network for convenience. See that entry for the full field reference.

Endpoint

GET {{edgeUrl}}/dm/deviceinfo/modem

Authentication

HTTP Basic Auth. Username is your API token, password is empty. Tokens are managed under System > Access Control > Tokens.

Response

See Info > Mobile Broadband Info.

Errors

HTTP status When it happens
400 Bad Request Missing or malformed query/body parameter.
401 Unauthorized Missing or invalid credentials.
403 Forbidden Token lacks permission for this operation.
404 Not Found Target entity does not exist.
5xx Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support.

TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.

Response

Status: 200 OK

[
    {
        "addrIPv4": {
            "cidr": "10.20.30.1/30"
        },
        "addrIPv6": {
            "cidr": "10.20.30.1/30"
        },
        "apnAssigned": "10569.mcs.mnc410.mcc310.gprs",
        "apnRequested": "broadband",
        "dns": [
            "8.8.8.8",
            "8.8.4.4",
            "2001:4860:4860::8888",
            "2001:4860:4860::8844"
        ],
        "iccid": "89014103279631659340",
        "imei": "014666000090318",
        "lastConnAt": "2016-06-15T06:29:52Z",
        "manufacturer": "WNC",
        "model": "M14A2A",
        "name": "wwan0",
        "network": "AT&T",
        "revision": "MPSS: M14A2A_v11.50.171541 APSS: M14A2A_v11.54.171541",
        "rsrpDbm": -56,
        "rssiDbm": -56,
        "signalBars": 3,
        "status": "home"
    }
]

View this page as Markdown