All services are online

Hot-path endpoints used by partner applications and consumer scan flows to submit O-KEY images and retrieve authentic / not-authenticated decisions. Degradation here is visible to end consumers in real time.

OAuth 2.0 token issuance, refresh, and revocation. Required to obtain credentials for the Authentication and Registration APIs — degradation here will cascade into both.

Enrolment of new O-KEYs, lifecycle state transitions, lookup, search, and PUF reference resolution. Used by partner factories, label converters, and back-office systems; not on the consumer-scan hot path.