A beadlock ring bolts the tire bead to the rim so it cannot slip. Beadlock does the same for this API: every session is bolted to a verified dealer account, and Jackman Wheels controls the bolts. The numbers below are live from the running API.
Signed sessions
POST /v1/beadlock/mount swaps a dealer key for a signed session token that expires in 15 minutes. Tokens cannot mint new tokens, and revoking the key ends every session it opened. Each session carries a visible torque sequence fingerprint.
Per dealer kill switch
Jackman Wheels can unbolt any dealer in one click from the control room. Their calls return 403 and their storefront pauses within a second. Bolting back on restores them live.
Rate limits
Every key is limited per minute, and failed credentials throttle by source address so keys cannot be brute forced. Over the line means 429, not access.
Audit trail
Every session mount, denied call, rate limit and lockout is logged with a masked key and its source address, and streams live into the control room security panel. Tenants never see each other's activity.