Transactions

Click a row for the full drill-down: the signed event payloads exactly as the CRM receives them, the ledger record, and the raw processor response.

	When	Ref	Customer	Job	Type	Channel	Amount	Status

Event deliveries ⬇ Export debug JSON 🔎 Sweep terminals now ⏸ Pause a terminal for testing

Latest 15 — click a row to see the delivered payload.

	#	Event	Location	Delivery	Attempts	When

Create organization

One org per CRM customer (e.g. You Move Me). The API key and webhook secret are shown once.

Name Ingestion URL (their events endpoint) Create org

Back-office access (email sign-in)

Email	Access	Added

Add user email Access Add

BlueSage staff see every organization and can do everything here. One organization scopes the account to that org alone — its dashboard, transactions, events, locations and devices, and nothing else. A scoped user cannot see this page, cannot create or delete organizations, and cannot rotate credentials, so they can neither widen their own access nor remove yours.

Sign-in codes are single-use, expire in 10 minutes, and only work in the browser that requested them (a relayed/phished code fails). A single staff address is the safest configuration: it cannot remove itself and it cannot be removed as the last one, so nobody can take it away. A second staff address buys mailbox redundancy but makes each removable by the other — add one only if you want that trade. Scoped users never affect this either way; they cannot see this page. Password sign-in disables automatically while this list is active; the break-glass, for a dead mailbox or any other way in, is ADMIN_FORCE_PASSWORD=1 in the server env + restart (requires server access, by design).

New signup requests

Submitted by the CRM via POST /v1/onboarding-requests as YMM adds organizations/locations. Provision the location, then send back its location_id.

When	Org	Location	Contact	Notes	Status

Merchant applications

Submitted by a software provider via POST /v1/merchant-applications — a business they want boarded. Business details only: tax ids, bank details and owner identity are never accepted there, so collect those from the merchant directly.

When	Submitted by	Business	Legal contact		Status