Documentation and guides
Resources
Technical documentation, architecture notes, and reference material for operators integrating with Orbitalink or building on top of the platform.
Start here
Documentation
Reference
Technical glossary
Security and tenancy
How Orbitalink isolates your data
→Every API route checks for a valid authenticated session before returning data.
→All database queries for stations, passes, telemetry, and recordings are filtered by session.tenantId.
→The WebSocket gateway validates operator JWTs server-side and rejects commands targeting stations outside the caller's tenant.
→Station key hashes and API secrets are never returned in API responses or logged.
→Role-based access (ADMIN / USER) enforces who can invite, register stations, and issue hardware commands.