update readme

2026-07-10 15:59:53 +00:00 · 2026-07-09 21:32:35 -04:00
60 changed files with 99 additions and 1819 deletions
--- a/README.md
+++ b/README.md
@@ -41,7 +41,7 @@
    </strong>
 </p>

-Pangolin is an open-source, identity-based remote access platform built on WireGuard® that enables secure, seamless connectivity to private and public resources. Pangolin combines reverse proxy and VPN capabilities into one platform, providing browser-based access to web applications and client-based access to any private resources with NAT traversal, all with granular access controls.
+Pangolin is an open-source, identity-based remote access platform built on WireGuard® that enables secure connectivity to infrastructure anywhere. It combines reverse-proxy and VPN capabilities into one platform, providing browser-based access to web applications and client-based access to private resources with NAT traversal, all with granular access control.

 ## Installation

@@ -63,11 +63,26 @@ Pangolin is an open-source, identity-based remote access platform built on WireG

 Pangolin's site connectors provide gateways into networks so you can access any networked resources. Sites use outbound tunnels and intelligent NAT traversal to make networks behind restrictive firewalls available for authorized access without public IPs or open ports. Easily deploy a site as a binary or container on any platform.

+* Lightweight user-space connector runs anywhere
+* Punches through any firewall
+* Doesn't require open ports or a public IP
+* Strict network segmentation
+* WireGuard-based
+* Get alerts when a device or network resource goes down
+
 <img src="public/screenshots/sites.png" alt="Sites" width="100%" />

 ### Browser-based reverse proxy access

-Expose web applications through identity and context-aware tunneled reverse proxies. Users access applications through any web browser with authentication and granular access control without installing a client. Pangolin handles routing, load balancing, health checking, and automatic SSL certificates without exposing your network directly to the internet.
+Expose HTTPS web applications and connect to VNC, RDP, and SSH entirely in the browser through identity and context-aware tunneled reverse proxies. Users access resources with authentication and granular access control without installing a client. Pangolin handles routing, load balancing, health checking, and automatic SSL certificates without exposing your network directly to the internet.
+
+* Expose a web panel anywhere
+* Access via any web browser
+* Single sign-on across all resources
+* HTTPS resources
+* Remote desktop in the browser with VNC and RDP
+* In-browser SSH terminal with privileged access management (PAM)
+* PIN codes, passcodes, email OTP, geoblocking, allow-lists, and more

 <img src="public/clip.gif" alt="Reverse proxy access" width="100%" />

@@ -75,14 +90,35 @@ Expose web applications through identity and context-aware tunneled reverse prox

 Access private resources like SSH servers, databases, RDP, and entire network ranges through Pangolin clients. Intelligent NAT traversal enables connections even through restrictive firewalls, while DNS aliases provide friendly names and fast connections to resources across all your sites. Add redundancy by routing traffic through multiple connectors in your network.

+* Peer-to-peer with intelligent NAT traversal
+* Hosts/IPs and port ranges
+* Network ranges/CIDRs
+* Friendly DNS aliases for network addresses
+* Privileged access management (PAM) with SSH resources
+* Private HTTPS resources only accessible on the private network
+
 <img src="public/screenshots/private-resources.png" alt="Private resources" width="100%" />

 ### Give users and roles access to resources

-Use Pangolin's built in users or bring your own identity provider and set up role based access control (RBAC). Grant users access to specific resources, not entire networks. Unlike traditional VPNs that expose full network access, Pangolin's zero-trust model ensures users can only reach the applications, services, and routes you explicitly define.
+Use Pangolin's built-in users or bring your own identity provider and set up role-based access control (RBAC). Grant users access to specific resources, not entire networks. Unlike traditional VPNs that expose full network access, Pangolin's zero-trust model ensures users can only reach the applications, services, and routes you explicitly define.
+
+* Bring your existing identity provider (IdP) or use Pangolin identities
+* Sync users and roles from your IdP
+* User- and role-based access control
+* Full network audit and access logs

 <img src="public/screenshots/users.png" alt="Users from identity provider with roles" width="100%" />

+### Find and launch resources from a personalized home page
+
+Give users a landing page to quickly find and open the resources they can access. Resources are grouped by site or label, searchable, and filterable, with grid or list views. Saved views capture filters, grouping, and layout as personal or organization-wide defaults.
+
+* Single place for admins and non-admins to see accessible resources
+* Create reusable views for common access patterns
+
+<img src="public/screenshots/resource-launcher.png" alt="Resource Launcher" width="100%" />
+
 ## Download Clients

 Download the Pangolin client for your platform:
--- a/public/screenshots/resource-launcher.png
+++ b/public/screenshots/resource-launcher.png
--- a/server/routers/accessToken/generateAccessToken.ts
+++ b/server/routers/accessToken/generateAccessToken.ts
@@ -73,39 +73,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/public-resource/{resourceId}/access-token",
-    description: "Generate a new access token for a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.AccessToken],
-    request: {
-        params: generateAccssTokenParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: generateAccessTokenBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function generateAccessToken(
    req: Request,
    res: Response,
--- a/server/routers/accessToken/listAccessTokens.ts
+++ b/server/routers/accessToken/listAccessTokens.ts
@@ -176,35 +176,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "get",
-    path: "/public-resource/{resourceId}/access-tokens",
-    description: "List all access tokens for a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.AccessToken],
-    request: {
-        params: z.object({
-            resourceId: z.number()
-        }),
-        query: listAccessTokensSchema
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function listAccessTokens(
    req: Request,
    res: Response,
--- a/server/routers/integration.ts
+++ b/server/routers/integration.ts
@@ -162,7 +162,7 @@ authenticated.get(

 // Site Resource endpoints
 authenticated.put(
-    ["/org/:orgId/site-resource", "/org/:orgId/private-resource"],
+    "/org/:orgId/site-resource",
    verifyApiKeyOrgAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.createSiteResource),
@@ -171,10 +171,7 @@ authenticated.put(
 );

 authenticated.get(
-    [
-        "/org/:orgId/site/:siteId/resources",
-        "/org/:orgId/site/:siteId/private-resources"
-    ],
+    "/org/:orgId/site/:siteId/resources",
    verifyApiKeyOrgAccess,
    verifyApiKeySiteAccess,
    verifyApiKeyHasAction(ActionsEnum.listSiteResources),
@@ -182,21 +179,21 @@ authenticated.get(
 );

 authenticated.get(
-    ["/org/:orgId/site-resources", "/org/:orgId/private-resources"],
+    "/org/:orgId/site-resources",
    verifyApiKeyOrgAccess,
    verifyApiKeyHasAction(ActionsEnum.listSiteResources),
    siteResource.listAllSiteResourcesByOrg
 );

 authenticated.get(
-    ["/site-resource/:siteResourceId", "/private-resource/:siteResourceId"],
+    "/site-resource/:siteResourceId",
    verifyApiKeySiteResourceAccess,
    verifyApiKeyHasAction(ActionsEnum.getSiteResource),
    siteResource.getSiteResource
 );

 authenticated.post(
-    ["/site-resource/:siteResourceId", "/private-resource/:siteResourceId"],
+    "/site-resource/:siteResourceId",
    verifyApiKeySiteResourceAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.updateSiteResource),
@@ -205,7 +202,7 @@ authenticated.post(
 );

 authenticated.delete(
-    ["/site-resource/:siteResourceId", "/private-resource/:siteResourceId"],
+    "/site-resource/:siteResourceId",
    verifyApiKeySiteResourceAccess,
    verifyApiKeyHasAction(ActionsEnum.deleteSiteResource),
    logActionAudit(ActionsEnum.deleteSiteResource),
@@ -213,40 +210,28 @@ authenticated.delete(
 );

 authenticated.get(
-    [
-        "/site-resource/:siteResourceId/roles",
-        "/private-resource/:siteResourceId/roles"
-    ],
+    "/site-resource/:siteResourceId/roles",
    verifyApiKeySiteResourceAccess,
    verifyApiKeyHasAction(ActionsEnum.listResourceRoles),
    siteResource.listSiteResourceRoles
 );

 authenticated.get(
-    [
-        "/site-resource/:siteResourceId/users",
-        "/private-resource/:siteResourceId/users"
-    ],
+    "/site-resource/:siteResourceId/users",
    verifyApiKeySiteResourceAccess,
    verifyApiKeyHasAction(ActionsEnum.listResourceUsers),
    siteResource.listSiteResourceUsers
 );

 authenticated.get(
-    [
-        "/site-resource/:siteResourceId/clients",
-        "/private-resource/:siteResourceId/clients"
-    ],
+    "/site-resource/:siteResourceId/clients",
    verifyApiKeySiteResourceAccess,
    verifyApiKeyHasAction(ActionsEnum.listResourceUsers),
    siteResource.listSiteResourceClients
 );

 authenticated.post(
-    [
-        "/site-resource/:siteResourceId/roles",
-        "/private-resource/:siteResourceId/roles"
-    ],
+    "/site-resource/:siteResourceId/roles",
    verifyApiKeySiteResourceAccess,
    verifyApiKeyRoleAccess,
    verifyLimits,
@@ -256,10 +241,7 @@ authenticated.post(
 );

 authenticated.post(
-    [
-        "/site-resource/:siteResourceId/users",
-        "/private-resource/:siteResourceId/users"
-    ],
+    "/site-resource/:siteResourceId/users",
    verifyApiKeySiteResourceAccess,
    verifyApiKeySetResourceUsers,
    verifyLimits,
@@ -269,10 +251,7 @@ authenticated.post(
 );

 authenticated.post(
-    [
-        "/site-resource/:siteResourceId/roles/add",
-        "/private-resource/:siteResourceId/roles/add"
-    ],
+    "/site-resource/:siteResourceId/roles/add",
    verifyApiKeySiteResourceAccess,
    verifyApiKeyRoleAccess,
    verifyLimits,
@@ -282,10 +261,7 @@ authenticated.post(
 );

 authenticated.post(
-    [
-        "/site-resource/:siteResourceId/roles/remove",
-        "/private-resource/:siteResourceId/roles/remove"
-    ],
+    "/site-resource/:siteResourceId/roles/remove",
    verifyApiKeySiteResourceAccess,
    verifyApiKeyRoleAccess,
    verifyLimits,
@@ -295,10 +271,7 @@ authenticated.post(
 );

 authenticated.post(
-    [
-        "/site-resource/:siteResourceId/users/add",
-        "/private-resource/:siteResourceId/users/add"
-    ],
+    "/site-resource/:siteResourceId/users/add",
    verifyApiKeySiteResourceAccess,
    verifyApiKeySetResourceUsers,
    verifyLimits,
@@ -308,10 +281,7 @@ authenticated.post(
 );

 authenticated.post(
-    [
-        "/site-resource/:siteResourceId/users/remove",
-        "/private-resource/:siteResourceId/users/remove"
-    ],
+    "/site-resource/:siteResourceId/users/remove",
    verifyApiKeySiteResourceAccess,
    verifyApiKeySetResourceUsers,
    verifyLimits,
@@ -321,10 +291,7 @@ authenticated.post(
 );

 authenticated.post(
-    [
-        "/site-resource/:siteResourceId/clients",
-        "/private-resource/:siteResourceId/clients"
-    ],
+    "/site-resource/:siteResourceId/clients",
    verifyApiKeySiteResourceAccess,
    verifyApiKeySetResourceClients,
    verifyLimits,
@@ -334,10 +301,7 @@ authenticated.post(
 );

 authenticated.post(
-    [
-        "/site-resource/:siteResourceId/clients/add",
-        "/private-resource/:siteResourceId/clients/add"
-    ],
+    "/site-resource/:siteResourceId/clients/add",
    verifyApiKeySiteResourceAccess,
    verifyApiKeySetResourceClients,
    verifyLimits,
@@ -347,10 +311,7 @@ authenticated.post(
 );

 authenticated.post(
-    [
-        "/site-resource/:siteResourceId/clients/remove",
-        "/private-resource/:siteResourceId/clients/remove"
-    ],
+    "/site-resource/:siteResourceId/clients/remove",
    verifyApiKeySiteResourceAccess,
    verifyApiKeySetResourceClients,
    verifyLimits,
@@ -360,7 +321,7 @@ authenticated.post(
 );

 authenticated.post(
-    ["/client/:clientId/site-resources", "/client/:clientId/private-resources"],
+    "/client/:clientId/site-resources",
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.setResourceUsers),
    logActionAudit(ActionsEnum.setResourceUsers),
@@ -368,7 +329,7 @@ authenticated.post(
 );

 authenticated.put(
-    ["/org/:orgId/resource", "/org/:orgId/public-resource"],
+    "/org/:orgId/resource",
    verifyApiKeyOrgAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.createResource),
@@ -377,10 +338,7 @@ authenticated.put(
 );

 authenticated.put(
-    [
-        "/org/:orgId/site/:siteId/resource",
-        "/org/:orgId/site/:siteId/public-resource"
-    ],
+    "/org/:orgId/site/:siteId/resource",
    verifyApiKeyOrgAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.createResource),
@@ -389,14 +347,14 @@ authenticated.put(
 );

 authenticated.get(
-    ["/site/:siteId/resources", "/site/:siteId/public-resources"],
+    "/site/:siteId/resources",
    verifyApiKeySiteAccess,
    verifyApiKeyHasAction(ActionsEnum.listResources),
    resource.listResources
 );

 authenticated.get(
-    ["/org/:orgId/resources", "/org/:orgId/public-resources"],
+    "/org/:orgId/resources",
    verifyApiKeyOrgAccess,
    verifyApiKeyHasAction(ActionsEnum.listResources),
    resource.listResources
@@ -484,45 +442,42 @@ authenticated.delete(
 );

 authenticated.get(
-    ["/resource/:resourceId/roles", "/public-resource/:resourceId/roles"],
+    "/resource/:resourceId/roles",
    verifyApiKeyResourceAccess,
    verifyApiKeyHasAction(ActionsEnum.listResourceRoles),
    resource.listResourceRoles
 );

 authenticated.get(
-    ["/resource/:resourceId/users", "/public-resource/:resourceId/users"],
+    "/resource/:resourceId/users",
    verifyApiKeyResourceAccess,
    verifyApiKeyHasAction(ActionsEnum.listResourceUsers),
    resource.listResourceUsers
 );

 authenticated.get(
-    ["/resource/:resourceId", "/public-resource/:resourceId"],
+    "/resource/:resourceId",
    verifyApiKeyResourceAccess,
    verifyApiKeyHasAction(ActionsEnum.getResource),
    resource.getResource
 );

 authenticated.get(
-    [
-        "/resource-policy/:resourcePolicyId",
-        "/public-resource-policy/:resourcePolicyId"
-    ],
+    "/resource-policy/:resourcePolicyId",
    verifyApiKeyResourcePolicyAccess,
    verifyApiKeyHasAction(ActionsEnum.getResourcePolicy),
    policy.getResourcePolicy
 );

 authenticated.get(
-    ["/resource/:resourceId/policies", "/public-resource/:resourceId/policies"],
+    "/resource/:resourceId/policies",
    verifyApiKeyResourceAccess,
    verifyApiKeyHasAction(ActionsEnum.getResourcePolicy),
    resource.getResourcePolicies
 );

 authenticated.post(
-    ["/resource/:resourceId", "/public-resource/:resourceId"],
+    "/resource/:resourceId",
    verifyApiKeyResourceAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.updateResource),
@@ -531,17 +486,14 @@ authenticated.post(
 );

 authenticated.put(
-    [
-        "/resource-policy/:resourcePolicyId",
-        "/public-resource-policy/:resourcePolicyId"
-    ],
+    "/resource-policy/:resourcePolicyId",
    verifyApiKeyResourcePolicyAccess,
    verifyApiKeyHasAction(ActionsEnum.updateResourcePolicy),
    policy.updateResourcePolicy
 );

 authenticated.delete(
-    ["/resource/:resourceId", "/public-resource/:resourceId"],
+    "/resource/:resourceId",
    verifyApiKeyResourceAccess,
    verifyApiKeyHasAction(ActionsEnum.deleteResource),
    logActionAudit(ActionsEnum.deleteResource),
@@ -549,7 +501,7 @@ authenticated.delete(
 );

 authenticated.put(
-    ["/resource/:resourceId/target", "/public-resource/:resourceId/target"],
+    "/resource/:resourceId/target",
    verifyApiKeyResourceAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.createTarget),
@@ -558,14 +510,14 @@ authenticated.put(
 );

 authenticated.get(
-    ["/resource/:resourceId/targets", "/public-resource/:resourceId/targets"],
+    "/resource/:resourceId/targets",
    verifyApiKeyResourceAccess,
    verifyApiKeyHasAction(ActionsEnum.listTargets),
    target.listTargets
 );

 authenticated.put(
-    ["/resource/:resourceId/rule", "/public-resource/:resourceId/rule"],
+    "/resource/:resourceId/rule",
    verifyApiKeyResourceAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.createResourceRule),
@@ -574,17 +526,14 @@ authenticated.put(
 );

 authenticated.get(
-    ["/resource/:resourceId/rules", "/public-resource/:resourceId/rules"],
+    "/resource/:resourceId/rules",
    verifyApiKeyResourceAccess,
    verifyApiKeyHasAction(ActionsEnum.listResourceRules),
    resource.listResourceRules
 );

 authenticated.post(
-    [
-        "/resource/:resourceId/rule/:ruleId",
-        "/public-resource/:resourceId/rule/:ruleId"
-    ],
+    "/resource/:resourceId/rule/:ruleId",
    verifyApiKeyResourceAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.updateResourceRule),
@@ -593,10 +542,7 @@ authenticated.post(
 );

 authenticated.delete(
-    [
-        "/resource/:resourceId/rule/:ruleId",
-        "/public-resource/:resourceId/rule/:ruleId"
-    ],
+    "/resource/:resourceId/rule/:ruleId",
    verifyApiKeyResourceAccess,
    verifyApiKeyHasAction(ActionsEnum.deleteResourceRule),
    logActionAudit(ActionsEnum.deleteResourceRule),
@@ -678,7 +624,7 @@ authenticated.post(
 );

 authenticated.post(
-    ["/resource/:resourceId/roles", "/public-resource/:resourceId/roles"],
+    "/resource/:resourceId/roles",
    verifyApiKeyResourceAccess,
    verifyApiKeyRoleAccess,
    verifyLimits,
@@ -688,7 +634,7 @@ authenticated.post(
 );

 authenticated.post(
-    ["/resource/:resourceId/users", "/public-resource/:resourceId/users"],
+    "/resource/:resourceId/users",
    verifyApiKeyResourceAccess,
    verifyApiKeySetResourceUsers,
    verifyLimits,
@@ -698,10 +644,7 @@ authenticated.post(
 );

 authenticated.put(
-    [
-        "/resource-policy/:resourcePolicyId/access-control",
-        "/public-resource-policy/:resourcePolicyId/access-control"
-    ],
+    "/resource-policy/:resourcePolicyId/access-control",
    verifyApiKeyResourcePolicyAccess,
    verifyApiKeyRoleAccess,
    verifyLimits,
@@ -713,10 +656,7 @@ authenticated.put(
 );

 authenticated.put(
-    [
-        "/resource-policy/:resourcePolicyId/password",
-        "/public-resource-policy/:resourcePolicyId/password"
-    ],
+    "/resource-policy/:resourcePolicyId/password",
    verifyApiKeyResourcePolicyAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.setResourcePolicyPassword),
@@ -725,10 +665,7 @@ authenticated.put(
 );

 authenticated.put(
-    [
-        "/resource-policy/:resourcePolicyId/pincode",
-        "/public-resource-policy/:resourcePolicyId/pincode"
-    ],
+    "/resource-policy/:resourcePolicyId/pincode",
    verifyApiKeyResourcePolicyAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.setResourcePolicyPincode),
@@ -737,10 +674,7 @@ authenticated.put(
 );

 authenticated.put(
-    [
-        "/resource-policy/:resourcePolicyId/header-auth",
-        "/public-resource-policy/:resourcePolicyId/header-auth"
-    ],
+    "/resource-policy/:resourcePolicyId/header-auth",
    verifyApiKeyResourcePolicyAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.setResourcePolicyHeaderAuth),
@@ -749,10 +683,7 @@ authenticated.put(
 );

 authenticated.put(
-    [
-        "/resource-policy/:resourcePolicyId/whitelist",
-        "/public-resource-policy/:resourcePolicyId/whitelist"
-    ],
+    "/resource-policy/:resourcePolicyId/whitelist",
    verifyApiKeyResourcePolicyAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.setResourcePolicyWhitelist),
@@ -761,10 +692,7 @@ authenticated.put(
 );

 authenticated.put(
-    [
-        "/resource-policy/:resourcePolicyId/rules",
-        "/public-resource-policy/:resourcePolicyId/rules"
-    ],
+    "/resource-policy/:resourcePolicyId/rules",
    verifyApiKeyResourcePolicyAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.setResourcePolicyRules),
@@ -773,10 +701,7 @@ authenticated.put(
 );

 authenticated.post(
-    [
-        "/resource/:resourceId/roles/add",
-        "/public-resource/:resourceId/roles/add"
-    ],
+    "/resource/:resourceId/roles/add",
    verifyApiKeyResourceAccess,
    verifyApiKeyRoleAccess,
    verifyLimits,
@@ -786,10 +711,7 @@ authenticated.post(
 );

 authenticated.post(
-    [
-        "/resource/:resourceId/roles/remove",
-        "/public-resource/:resourceId/roles/remove"
-    ],
+    "/resource/:resourceId/roles/remove",
    verifyApiKeyResourceAccess,
    verifyApiKeyRoleAccess,
    verifyLimits,
@@ -799,10 +721,7 @@ authenticated.post(
 );

 authenticated.post(
-    [
-        "/resource/:resourceId/users/add",
-        "/public-resource/:resourceId/users/add"
-    ],
+    "/resource/:resourceId/users/add",
    verifyApiKeyResourceAccess,
    verifyApiKeySetResourceUsers,
    verifyLimits,
@@ -812,10 +731,7 @@ authenticated.post(
 );

 authenticated.post(
-    [
-        "/resource/:resourceId/users/remove",
-        "/public-resource/:resourceId/users/remove"
-    ],
+    "/resource/:resourceId/users/remove",
    verifyApiKeyResourceAccess,
    verifyApiKeySetResourceUsers,
    verifyLimits,
@@ -825,7 +741,7 @@ authenticated.post(
 );

 authenticated.post(
-    [`/resource/:resourceId/password`, `/public-resource/:resourceId/password`],
+    `/resource/:resourceId/password`,
    verifyApiKeyResourceAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.setResourcePassword),
@@ -834,7 +750,7 @@ authenticated.post(
 );

 authenticated.post(
-    [`/resource/:resourceId/pincode`, `/public-resource/:resourceId/pincode`],
+    `/resource/:resourceId/pincode`,
    verifyApiKeyResourceAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.setResourcePincode),
@@ -843,10 +759,7 @@ authenticated.post(
 );

 authenticated.post(
-    [
-        `/resource/:resourceId/header-auth`,
-        `/public-resource/:resourceId/header-auth`
-    ],
+    `/resource/:resourceId/header-auth`,
    verifyApiKeyResourceAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.setResourceHeaderAuth),
@@ -855,10 +768,7 @@ authenticated.post(
 );

 authenticated.post(
-    [
-        `/resource/:resourceId/whitelist`,
-        `/public-resource/:resourceId/whitelist`
-    ],
+    `/resource/:resourceId/whitelist`,
    verifyApiKeyResourceAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.setResourceWhitelist),
@@ -867,10 +777,7 @@ authenticated.post(
 );

 authenticated.post(
-    [
-        `/resource/:resourceId/whitelist/add`,
-        `/public-resource/:resourceId/whitelist/add`
-    ],
+    `/resource/:resourceId/whitelist/add`,
    verifyApiKeyResourceAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.setResourceWhitelist),
@@ -878,10 +785,7 @@ authenticated.post(
 );

 authenticated.post(
-    [
-        `/resource/:resourceId/whitelist/remove`,
-        `/public-resource/:resourceId/whitelist/remove`
-    ],
+    `/resource/:resourceId/whitelist/remove`,
    verifyApiKeyResourceAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.setResourceWhitelist),
@@ -889,20 +793,14 @@ authenticated.post(
 );

 authenticated.get(
-    [
-        `/resource/:resourceId/whitelist`,
-        `/public-resource/:resourceId/whitelist`
-    ],
+    `/resource/:resourceId/whitelist`,
    verifyApiKeyResourceAccess,
    verifyApiKeyHasAction(ActionsEnum.getResourceWhitelist),
    resource.getResourceWhitelist
 );

 authenticated.post(
-    [
-        `/resource/:resourceId/access-token`,
-        `/public-resource/:resourceId/access-token`
-    ],
+    `/resource/:resourceId/access-token`,
    verifyApiKeyResourceAccess,
    verifyLimits,
    verifyApiKeyHasAction(ActionsEnum.generateAccessToken),
@@ -911,10 +809,7 @@ authenticated.post(
 );

 authenticated.post(
-    [
-        `/resource/:resourceId/session-token`,
-        `/public-resource/:resourceId/session-token`
-    ],
+    `/resource/:resourceId/session-token`,
    verifyApiKeyResourceAccess,
    verifyApiKeyUserAccess,
    verifyLimits,
@@ -939,10 +834,7 @@ authenticated.get(
 );

 authenticated.get(
-    [
-        `/resource/:resourceId/access-tokens`,
-        `/public-resource/:resourceId/access-tokens`
-    ],
+    `/resource/:resourceId/access-tokens`,
    verifyApiKeyResourceAccess,
    verifyApiKeyHasAction(ActionsEnum.listAccessTokens),
    accessToken.listAccessTokens
@@ -1272,7 +1164,7 @@ authenticated.get(
 );

 authenticated.get(
-    ["/org/:orgId/resource-names", "/org/:orgId/public-resource-names"],
+    "/org/:orgId/resource-names",
    verifyApiKeyOrgAccess,
    verifyApiKeyHasAction(ActionsEnum.listResources),
    resource.listAllResourceNames
--- a/server/routers/policy/getResourcePolicy.ts
+++ b/server/routers/policy/getResourcePolicy.ts
@@ -191,19 +191,6 @@ registry.registerPath({
    responses: {}
 });

-registry.registerPath({
-    method: "get",
-    path: "/public-resource-policy/{resourcePolicyId}",
-    description: "Get a resource policy by its resourcePolicyId.",
-    tags: [OpenAPITags.Policy],
-    request: {
-        params: z.object({
-            resourcePolicyId: z.number()
-        })
-    },
-    responses: {}
-});
-
 export async function getResourcePolicy(
    req: Request,
    res: Response,
--- a/server/routers/policy/setResourcePolicyAccessControl.ts
+++ b/server/routers/policy/setResourcePolicyAccessControl.ts
@@ -54,25 +54,6 @@ registry.registerPath({
    responses: {}
 });

-registry.registerPath({
-    method: "post",
-    path: "/public-resource-policy/{resourceId}/access-control",
-    description:
-        "Set access control users for a resource policy, including SSO, users, roles, Identity provider.",
-    tags: [OpenAPITags.Policy, OpenAPITags.User],
-    request: {
-        params: setResourcePolicyAccessControlParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: setResourcePolicyAcccessControlBodySchema
-                }
-            }
-        }
-    },
-    responses: {}
-});
-
 export async function setResourcePolicyAccessControl(
    req: Request,
    res: Response,
--- a/server/routers/policy/setResourcePolicyHeaderAuth.ts
+++ b/server/routers/policy/setResourcePolicyHeaderAuth.ts
@@ -43,25 +43,6 @@ registry.registerPath({
    responses: {}
 });

-registry.registerPath({
-    method: "put",
-    path: "/public-resource-policy/{resourcePolicyId}/header-auth",
-    description:
-        "Set or update the header authentication for a resource policy. If user and password is not provided, it will remove the header authentication.",
-    tags: [OpenAPITags.Policy],
-    request: {
-        params: setResourcePolicyHeaderAuthParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: setResourcePolicyHeaderAuthBodySchema
-                }
-            }
-        }
-    },
-    responses: {}
-});
-
 export async function setResourcePolicyHeaderAuth(
    req: Request,
    res: Response,
--- a/server/routers/policy/setResourcePolicyPassword.ts
+++ b/server/routers/policy/setResourcePolicyPassword.ts
@@ -38,25 +38,6 @@ registry.registerPath({
    responses: {}
 });

-registry.registerPath({
-    method: "put",
-    path: "/public-resource-policy/{resourcePolicyId}/password",
-    description:
-        "Set the password for a resource policy. Setting the password to null will remove it.",
-    tags: [OpenAPITags.Policy],
-    request: {
-        params: setResourcePolicyPasswordParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: setResourcePolicyPasswordBodySchema
-                }
-            }
-        }
-    },
-    responses: {}
-});
-
 export async function setResourcePolicyPassword(
    req: Request,
    res: Response,
--- a/server/routers/policy/setResourcePolicyPincode.ts
+++ b/server/routers/policy/setResourcePolicyPincode.ts
@@ -41,25 +41,6 @@ registry.registerPath({
    responses: {}
 });

-registry.registerPath({
-    method: "put",
-    path: "/public-resource-policy/{resourcePolicyId}/pincode",
-    description:
-        "Set the PIN code for a resource policy. Setting the PIN code to null will remove it.",
-    tags: [OpenAPITags.Policy],
-    request: {
-        params: setResourcePolicyPincodeParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: setResourcePolicyPincodeBodySchema
-                }
-            }
-        }
-    },
-    responses: {}
-});
-
 export async function setResourcePolicyPincode(
    req: Request,
    res: Response,
--- a/server/routers/policy/setResourcePolicyRules.ts
+++ b/server/routers/policy/setResourcePolicyRules.ts
@@ -61,25 +61,6 @@ registry.registerPath({
    responses: {}
 });

-registry.registerPath({
-    method: "put",
-    path: "/public-resource-policy/{resourcePolicyId}/rules",
-    description:
-        "Set all rules for a resource policy at once. This will replace all existing rules.",
-    tags: [OpenAPITags.Policy],
-    request: {
-        params: setResourcePolicyRulesParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: setResourcePolicyRulesBodySchema
-                }
-            }
-        }
-    },
-    responses: {}
-});
-
 export async function setResourcePolicyRules(
    req: Request,
    res: Response,
--- a/server/routers/policy/setResourcePolicyWhitelist.ts
+++ b/server/routers/policy/setResourcePolicyWhitelist.ts
@@ -46,25 +46,6 @@ registry.registerPath({
    responses: {}
 });

-registry.registerPath({
-    method: "put",
-    path: "/public-resource-policy/{resourcePolicyId}/whitelist",
-    description:
-        "Set email whitelist for a resource policy. This will replace all existing emails.",
-    tags: [OpenAPITags.Policy],
-    request: {
-        params: setResourcePolicyWhitelistParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: setResourcePolicyWhitelistBodySchema
-                }
-            }
-        }
-    },
-    responses: {}
-});
-
 export async function setResourcePolicyWhitelist(
    req: Request,
    res: Response,
--- a/server/routers/policy/updateResourcePolicy.ts
+++ b/server/routers/policy/updateResourcePolicy.ts
@@ -36,24 +36,6 @@ registry.registerPath({
    responses: {}
 });

-registry.registerPath({
-    method: "put",
-    path: "/public-resource-policy/{resourcePolicyId}",
-    description: "Update a resource policy.",
-    tags: [OpenAPITags.Org, OpenAPITags.Policy],
-    request: {
-        params: updateResourcePolicyParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: updateResourcePolicyBodySchema
-                }
-            }
-        }
-    },
-    responses: {}
-});
-
 export async function updateResourcePolicy(
    req: Request,
    res: Response,
--- a/server/routers/resource/addEmailToResourceWhitelist.ts
+++ b/server/routers/resource/addEmailToResourceWhitelist.ts
@@ -63,39 +63,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/public-resource/{resourceId}/whitelist/add",
-    description: "Add a single email to the resource whitelist.",
-    tags: [OpenAPITags.PublicResource],
-    request: {
-        params: addEmailToResourceWhitelistParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: addEmailToResourceWhitelistBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function addEmailToResourceWhitelist(
    req: Request,
    res: Response,
--- a/server/routers/resource/addRoleToResource.ts
+++ b/server/routers/resource/addRoleToResource.ts
@@ -59,40 +59,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/public-resource/{resourceId}/roles/add",
-    description:
-        "Add a single role to a resource. When the resource has an inline policy defined (no shared resource policy assigned), the role is added to the inline policy instead of directly to the resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Role],
-    request: {
-        params: addRoleToResourceParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: addRoleToResourceBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function addRoleToResource(
    req: Request,
    res: Response,
--- a/server/routers/resource/addUserToResource.ts
+++ b/server/routers/resource/addUserToResource.ts
@@ -59,40 +59,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/public-resource/{resourceId}/users/add",
-    description:
-        "Add a single user to a resource. When the resource has an inline policy defined (no shared resource policy assigned), the user is added to the inline policy instead of directly to the resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.User],
-    request: {
-        params: addUserToResourceParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: addUserToResourceBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function addUserToResource(
    req: Request,
    res: Response,
--- a/server/routers/resource/createResource.ts
+++ b/server/routers/resource/createResource.ts
@@ -182,39 +182,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "put",
-    path: "/org/{orgId}/public-resource",
-    description: "Create a resource.",
-    tags: [OpenAPITags.PublicResource],
-    request: {
-        params: createResourceParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: createHttpResourceSchema.or(createRawResourceSchema)
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function createResource(
    req: Request,
    res: Response,
--- a/server/routers/resource/createResourceRule.ts
+++ b/server/routers/resource/createResourceRule.ts
@@ -61,39 +61,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "put",
-    path: "/public-resource/{resourceId}/rule",
-    description: "Create a resource rule.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Rule],
-    request: {
-        params: createResourceRuleParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: createResourceRuleSchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function createResourceRule(
    req: Request,
    res: Response,
--- a/server/routers/resource/deleteResource.ts
+++ b/server/routers/resource/deleteResource.ts
@@ -44,32 +44,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "delete",
-    path: "/public-resource/{resourceId}",
-    description: "Delete a resource.",
-    tags: [OpenAPITags.PublicResource],
-    request: {
-        params: deleteResourceSchema
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function deleteResource(
    req: Request,
    res: Response,
--- a/server/routers/resource/deleteResourceRule.ts
+++ b/server/routers/resource/deleteResourceRule.ts
@@ -41,32 +41,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "delete",
-    path: "/public-resource/{resourceId}/rule/{ruleId}",
-    description: "Delete a resource rule.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Rule],
-    request: {
-        params: deleteResourceRuleSchema
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function deleteResourceRule(
    req: Request,
    res: Response,
--- a/server/routers/resource/getResource.ts
+++ b/server/routers/resource/getResource.ts
@@ -116,34 +116,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "get",
-    path: "/public-resource/{resourceId}",
-    description: "Get a resource by resourceId.",
-    tags: [OpenAPITags.PublicResource],
-    request: {
-        params: z.object({
-            resourceId: z.number()
-        })
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function getResource(
    req: Request,
    res: Response,
--- a/server/routers/resource/getResourcePolicies.ts
+++ b/server/routers/resource/getResourcePolicies.ts
@@ -33,17 +33,6 @@ registry.registerPath({
    responses: {}
 });

-registry.registerPath({
-    method: "get",
-    path: "/public-resource/{resourceId}/policies",
-    description: "Get the inline and shared policies associated with a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Policy],
-    request: {
-        params: getResourcePoliciesParamsSchema
-    },
-    responses: {}
-});
-
 export async function getResourcePolicies(
    req: Request,
    res: Response,
--- a/server/routers/resource/getResourceWhitelist.ts
+++ b/server/routers/resource/getResourceWhitelist.ts
@@ -66,32 +66,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "get",
-    path: "/public-resource/{resourceId}/whitelist",
-    description: "Get the whitelist of emails for a specific resource.",
-    tags: [OpenAPITags.PublicResource],
-    request: {
-        params: getResourceWhitelistSchema
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function getResourceWhitelist(
    req: Request,
    res: Response,
--- a/server/routers/resource/listAllResourceNames.ts
+++ b/server/routers/resource/listAllResourceNames.ts
@@ -57,34 +57,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "get",
-    path: "/org/{orgId}/public-resource-names",
-    description: "List all resource names for an organization.",
-    tags: [OpenAPITags.PublicResource],
-    request: {
-        params: z.object({
-            orgId: z.string()
-        })
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function listAllResourceNames(
    req: Request,
    res: Response,
--- a/server/routers/resource/listResourceRoles.ts
+++ b/server/routers/resource/listResourceRoles.ts
@@ -70,32 +70,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "get",
-    path: "/public-resource/{resourceId}/roles",
-    description: "List all roles for a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Role],
-    request: {
-        params: listResourceRolesSchema
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function listResourceRoles(
    req: Request,
    res: Response,
--- a/server/routers/resource/listResourceRules.ts
+++ b/server/routers/resource/listResourceRules.ts
@@ -94,33 +94,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "get",
-    path: "/public-resource/{resourceId}/rules",
-    description: "List rules for a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Rule],
-    request: {
-        params: listResourceRulesParamsSchema,
-        query: listResourceRulesSchema
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function listResourceRules(
    req: Request,
    res: Response,
--- a/server/routers/resource/listResourceUsers.ts
+++ b/server/routers/resource/listResourceUsers.ts
@@ -60,32 +60,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "get",
-    path: "/public-resource/{resourceId}/users",
-    description: "List all users for a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.User],
-    request: {
-        params: listResourceUsersSchema
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function listResourceUsers(
    req: Request,
    res: Response,
--- a/server/routers/resource/listResources.ts
+++ b/server/routers/resource/listResources.ts
@@ -425,35 +425,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "get",
-    path: "/org/{orgId}/public-resources",
-    description: "List resources for an organization.",
-    tags: [OpenAPITags.PublicResource],
-    request: {
-        params: z.object({
-            orgId: z.string()
-        }),
-        query: listResourcesSchema
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function listResources(
    req: Request,
    res: Response,
--- a/server/routers/resource/removeEmailFromResourceWhitelist.ts
+++ b/server/routers/resource/removeEmailFromResourceWhitelist.ts
@@ -63,39 +63,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/public-resource/{resourceId}/whitelist/remove",
-    description: "Remove a single email from the resource whitelist.",
-    tags: [OpenAPITags.PublicResource],
-    request: {
-        params: removeEmailFromResourceWhitelistParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: removeEmailFromResourceWhitelistBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function removeEmailFromResourceWhitelist(
    req: Request,
    res: Response,
--- a/server/routers/resource/removeRoleFromResource.ts
+++ b/server/routers/resource/removeRoleFromResource.ts
@@ -58,39 +58,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/public-resource/{resourceId}/roles/remove",
-    description: "Remove a single role from a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Role],
-    request: {
-        params: removeRoleFromResourceParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: removeRoleFromResourceBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function removeRoleFromResource(
    req: Request,
    res: Response,
--- a/server/routers/resource/removeUserFromResource.ts
+++ b/server/routers/resource/removeUserFromResource.ts
@@ -58,39 +58,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/public-resource/{resourceId}/users/remove",
-    description: "Remove a single user from a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.User],
-    request: {
-        params: removeUserFromResourceParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: removeUserFromResourceBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function removeUserFromResource(
    req: Request,
    res: Response,
--- a/server/routers/resource/setResourceHeaderAuth.ts
+++ b/server/routers/resource/setResourceHeaderAuth.ts
@@ -60,40 +60,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/public-resource/{resourceId}/header-auth",
-    description:
-        "Set or update the header authentication for a resource. If user and password is not provided, it will remove the header authentication.",
-    tags: [OpenAPITags.PublicResource],
-    request: {
-        params: setResourceAuthMethodsParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: setResourceAuthMethodsBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function setResourceHeaderAuth(
    req: Request,
    res: Response,
--- a/server/routers/resource/setResourcePassword.ts
+++ b/server/routers/resource/setResourcePassword.ts
@@ -58,40 +58,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/public-resource/{resourceId}/password",
-    description:
-        "Set the password for a resource. Setting the password to null will remove it.",
-    tags: [OpenAPITags.PublicResource],
-    request: {
-        params: setResourceAuthMethodsParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: setResourceAuthMethodsBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function setResourcePassword(
    req: Request,
    res: Response,
--- a/server/routers/resource/setResourcePincode.ts
+++ b/server/routers/resource/setResourcePincode.ts
@@ -58,40 +58,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/public-resource/{resourceId}/pincode",
-    description:
-        "Set the PIN code for a resource. Setting the PIN code to null will remove it.",
-    tags: [OpenAPITags.PublicResource],
-    request: {
-        params: setResourceAuthMethodsParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: setResourceAuthMethodsBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function setResourcePincode(
    req: Request,
    res: Response,
--- a/server/routers/resource/setResourceRoles.ts
+++ b/server/routers/resource/setResourceRoles.ts
@@ -52,40 +52,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/public-resource/{resourceId}/roles",
-    description:
-        "Set roles for a resource. This will replace all existing roles. When the resource has an inline policy defined (no shared resource policy assigned), roles are set on the inline policy instead of directly on the resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Role],
-    request: {
-        params: setResourceRolesParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: setResourceRolesBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function setResourceRoles(
    req: Request,
    res: Response,
--- a/server/routers/resource/setResourceUsers.ts
+++ b/server/routers/resource/setResourceUsers.ts
@@ -52,40 +52,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/public-resource/{resourceId}/users",
-    description:
-        "Set users for a resource. This will replace all existing users. When the resource has an inline policy defined (no shared resource policy assigned), users are set on the inline policy instead of directly on the resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.User],
-    request: {
-        params: setUserResourcesParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: setUserResourcesBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function setResourceUsers(
    req: Request,
    res: Response,
--- a/server/routers/resource/setResourceWhitelist.ts
+++ b/server/routers/resource/setResourceWhitelist.ts
@@ -66,40 +66,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/public-resource/{resourceId}/whitelist",
-    description:
-        "Set email whitelist for a resource. This will replace all existing emails.",
-    tags: [OpenAPITags.PublicResource],
-    request: {
-        params: setResourceWhitelistParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: setResourceWhitelistBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function setResourceWhitelist(
    req: Request,
    res: Response,
--- a/server/routers/resource/updateResource.ts
+++ b/server/routers/resource/updateResource.ts
@@ -273,42 +273,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/public-resource/{resourceId}",
-    description:
-        "Update a resource. Policy fields (sso, mfa, pincode, password, whitelist) update the inline policy when no shared resource policy is assigned; when a shared policy is assigned those fields override the shared policy for this resource only.",
-    tags: [OpenAPITags.PublicResource],
-    request: {
-        params: updateResourceParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: updateHttpResourceBodySchema.and(
-                        updateRawResourceBodySchema
-                    )
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function updateResource(
    req: Request,
    res: Response,
--- a/server/routers/resource/updateResourceRule.ts
+++ b/server/routers/resource/updateResourceRule.ts
@@ -78,39 +78,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/public-resource/{resourceId}/rule/{ruleId}",
-    description: "Update a resource rule.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Rule],
-    request: {
-        params: updateResourceRuleParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: updateResourceRuleSchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function updateResourceRule(
    req: Request,
    res: Response,
--- a/server/routers/siteResource/addClientToSiteResource.ts
+++ b/server/routers/siteResource/addClientToSiteResource.ts
@@ -62,40 +62,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/private-resource/{siteResourceId}/clients/add",
-    description:
-        "Add a single client to a site resource. Clients with a userId cannot be added.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.Client],
-    request: {
-        params: addClientToSiteResourceParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: addClientToSiteResourceBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function addClientToSiteResource(
    req: Request,
    res: Response,
--- a/server/routers/siteResource/addRoleToSiteResource.ts
+++ b/server/routers/siteResource/addRoleToSiteResource.ts
@@ -62,39 +62,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/private-resource/{siteResourceId}/roles/add",
-    description: "Add a single role to a site resource.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.Role],
-    request: {
-        params: addRoleToSiteResourceParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: addRoleToSiteResourceBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function addRoleToSiteResource(
    req: Request,
    res: Response,
--- a/server/routers/siteResource/addUserToSiteResource.ts
+++ b/server/routers/siteResource/addUserToSiteResource.ts
@@ -62,39 +62,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/private-resource/{siteResourceId}/users/add",
-    description: "Add a single user to a site resource.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.User],
-    request: {
-        params: addUserToSiteResourceParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: addUserToSiteResourceBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function addUserToSiteResource(
    req: Request,
    res: Response,
--- a/server/routers/siteResource/batchAddClientToSiteResources.ts
+++ b/server/routers/siteResource/batchAddClientToSiteResources.ts
@@ -67,39 +67,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/client/{clientId}/private-resources",
-    description: "Add a machine client to multiple site resources at once.",
-    tags: [OpenAPITags.Client],
-    request: {
-        params: batchAddClientToSiteResourcesParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: batchAddClientToSiteResourcesBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function batchAddClientToSiteResources(
    req: Request,
    res: Response,
--- a/server/routers/siteResource/createSiteResource.ts
+++ b/server/routers/siteResource/createSiteResource.ts
@@ -237,39 +237,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "put",
-    path: "/org/{orgId}/private-resource",
-    description: "Create a new site resource.",
-    tags: [OpenAPITags.PrivateResource],
-    request: {
-        params: createSiteResourceParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: createSiteResourceSchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function createSiteResource(
    req: Request,
    res: Response,
--- a/server/routers/siteResource/deleteSiteResource.ts
+++ b/server/routers/siteResource/deleteSiteResource.ts
@@ -49,32 +49,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "delete",
-    path: "/private-resource/{siteResourceId}",
-    description: "Delete a site resource.",
-    tags: [OpenAPITags.PrivateResource],
-    request: {
-        params: deleteSiteResourceParamsSchema
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function deleteSiteResource(
    req: Request,
    res: Response,
--- a/server/routers/siteResource/getSiteResource.ts
+++ b/server/routers/siteResource/getSiteResource.ts
@@ -83,36 +83,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "get",
-    path: "/private-resource/{siteResourceId}",
-    description: "Get a specific site resource by siteResourceId.",
-    tags: [OpenAPITags.PrivateResource],
-    request: {
-        params: z.object({
-            siteResourceId: z.number(),
-            siteId: z.number(),
-            orgId: z.string()
-        })
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 registry.registerPath({
    method: "get",
    path: "/org/{orgId}/site/{siteId}/resource/nice/{niceId}",
--- a/server/routers/siteResource/listAllSiteResourcesByOrg.ts
+++ b/server/routers/siteResource/listAllSiteResourcesByOrg.ts
@@ -244,33 +244,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "get",
-    path: "/org/{orgId}/private-resources",
-    description: "List all site resources for an organization.",
-    tags: [OpenAPITags.PrivateResource],
-    request: {
-        params: listAllSiteResourcesByOrgParamsSchema,
-        query: listAllSiteResourcesByOrgQuerySchema
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function listAllSiteResourcesByOrg(
    req: Request,
    res: Response,
--- a/server/routers/siteResource/listSiteResourceClients.ts
+++ b/server/routers/siteResource/listSiteResourceClients.ts
@@ -61,32 +61,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "get",
-    path: "/private-resource/{siteResourceId}/clients",
-    description: "List all clients for a site resource.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.Client],
-    request: {
-        params: listSiteResourceClientsSchema
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function listSiteResourceClients(
    req: Request,
    res: Response,
--- a/server/routers/siteResource/listSiteResourceRoles.ts
+++ b/server/routers/siteResource/listSiteResourceRoles.ts
@@ -62,32 +62,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "get",
-    path: "/private-resource/{siteResourceId}/roles",
-    description: "List all roles for a site resource.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.Role],
-    request: {
-        params: listSiteResourceRolesSchema
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function listSiteResourceRoles(
    req: Request,
    res: Response,
--- a/server/routers/siteResource/listSiteResourceUsers.ts
+++ b/server/routers/siteResource/listSiteResourceUsers.ts
@@ -65,32 +65,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "get",
-    path: "/private-resource/{siteResourceId}/users",
-    description: "List all users for a site resource.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.User],
-    request: {
-        params: listSiteResourceUsersSchema
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function listSiteResourceUsers(
    req: Request,
    res: Response,
--- a/server/routers/siteResource/listSiteResources.ts
+++ b/server/routers/siteResource/listSiteResources.ts
@@ -81,33 +81,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "get",
-    path: "/org/{orgId}/site/{siteId}/private-resources",
-    description: "List site resources for a site.",
-    tags: [OpenAPITags.PrivateResource],
-    request: {
-        params: listSiteResourcesParamsSchema,
-        query: listSiteResourcesQuerySchema
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function listSiteResources(
    req: Request,
    res: Response,
--- a/server/routers/siteResource/removeClientFromSiteResource.ts
+++ b/server/routers/siteResource/removeClientFromSiteResource.ts
@@ -62,40 +62,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/private-resource/{siteResourceId}/clients/remove",
-    description:
-        "Remove a single client from a site resource. Clients with a userId cannot be removed.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.Client],
-    request: {
-        params: removeClientFromSiteResourceParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: removeClientFromSiteResourceBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function removeClientFromSiteResource(
    req: Request,
    res: Response,
--- a/server/routers/siteResource/removeRoleFromSiteResource.ts
+++ b/server/routers/siteResource/removeRoleFromSiteResource.ts
@@ -62,39 +62,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/private-resource/{siteResourceId}/roles/remove",
-    description: "Remove a single role from a site resource.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.Role],
-    request: {
-        params: removeRoleFromSiteResourceParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: removeRoleFromSiteResourceBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function removeRoleFromSiteResource(
    req: Request,
    res: Response,
--- a/server/routers/siteResource/removeUserFromSiteResource.ts
+++ b/server/routers/siteResource/removeUserFromSiteResource.ts
@@ -62,39 +62,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/private-resource/{siteResourceId}/users/remove",
-    description: "Remove a single user from a site resource.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.User],
-    request: {
-        params: removeUserFromSiteResourceParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: removeUserFromSiteResourceBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function removeUserFromSiteResource(
    req: Request,
    res: Response,
--- a/server/routers/siteResource/setSiteResourceClients.ts
+++ b/server/routers/siteResource/setSiteResourceClients.ts
@@ -62,40 +62,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/private-resource/{siteResourceId}/clients",
-    description:
-        "Set clients for a site resource. This will replace all existing clients. Clients with a userId cannot be added.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.Client],
-    request: {
-        params: setSiteResourceClientsParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: setSiteResourceClientsBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function setSiteResourceClients(
    req: Request,
    res: Response,
--- a/server/routers/siteResource/setSiteResourceRoles.ts
+++ b/server/routers/siteResource/setSiteResourceRoles.ts
@@ -63,40 +63,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/private-resource/{siteResourceId}/roles",
-    description:
-        "Set roles for a site resource. This will replace all existing roles.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.Role],
-    request: {
-        params: setSiteResourceRolesParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: setSiteResourceRolesBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function setSiteResourceRoles(
    req: Request,
    res: Response,
--- a/server/routers/siteResource/setSiteResourceUsers.ts
+++ b/server/routers/siteResource/setSiteResourceUsers.ts
@@ -64,40 +64,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/private-resource/{siteResourceId}/users",
-    description:
-        "Set users for a site resource. This will replace all existing users.",
-    tags: [OpenAPITags.PrivateResource, OpenAPITags.User],
-    request: {
-        params: setSiteResourceUsersParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: setSiteResourceUsersBodySchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function setSiteResourceUsers(
    req: Request,
    res: Response,
--- a/server/routers/siteResource/updateSiteResource.ts
+++ b/server/routers/siteResource/updateSiteResource.ts
@@ -237,39 +237,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "post",
-    path: "/private-resource/{siteResourceId}",
-    description: "Update a site resource.",
-    tags: [OpenAPITags.PrivateResource],
-    request: {
-        params: updateSiteResourceParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: updateSiteResourceSchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function updateSiteResource(
    req: Request,
    res: Response,
--- a/server/routers/target/createTarget.ts
+++ b/server/routers/target/createTarget.ts
@@ -122,39 +122,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "put",
-    path: "/public-resource/{resourceId}/target",
-    description: "Create a target for a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Target],
-    request: {
-        params: createTargetParamsSchema,
-        body: {
-            content: {
-                "application/json": {
-                    schema: createTargetSchema
-                }
-            }
-        }
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function createTarget(
    req: Request,
    res: Response,
--- a/server/routers/target/listTargets.ts
+++ b/server/routers/target/listTargets.ts
@@ -115,33 +115,6 @@ registry.registerPath({
    }
 });

-registry.registerPath({
-    method: "get",
-    path: "/public-resource/{resourceId}/targets",
-    description: "List targets for a resource.",
-    tags: [OpenAPITags.PublicResource, OpenAPITags.Target],
-    request: {
-        params: listTargetsParamsSchema,
-        query: listTargetsSchema
-    },
-    responses: {
-        200: {
-            description: "Successful response",
-            content: {
-                "application/json": {
-                    schema: z.object({
-                        data: z.record(z.string(), z.any()).nullable(),
-                        success: z.boolean(),
-                        error: z.boolean(),
-                        message: z.string(),
-                        status: z.number()
-                    })
-                }
-            }
-        }
-    }
-});
-
 export async function listTargets(
    req: Request,
    res: Response,