Every Datab Node exposes a small set of HTTP surfaces. All bind 127.0.0.1 by default — they are operator and on-node-service-facing, not internet-exposed.

DatabStudio backend — port 8080

• /api/login — JWT issuance.
• /api/members/*, /api/loans/*, /api/savings/* — institution data.
• /api/health/* — operator health endpoints.
• /api/backup/* — backup history + manual trigger.
• /api/system/{reboot,shutdown} — disruptive ops (operator only, confirm-gated).
• /api/alerts — recent on-node alerts.
• /api/ddsn/status — DDSN pilot snapshot.
• /internal/orula/* — Orula-only, gated by X-Datab-Internal-Key.

Atlas Core — port 8090

• /api/atlas/credit/{uuid} — privacy-safe credit band.
• /api/atlas/members/register — institution-scoped registration.
• /api/atlas/sync/* — HQ sync triggers + status.
• /api/atlas/events — audit events.
• /api/ddsn/status — DDSN pilot status.

Orula — port 11444

• /orula/health, /orula/query
• /orula/report/{monthly-summary,daily-digest}
• /orula/loans/overdue, /orula/members/search
• /orula/whatsapp/draft-reminders (draft only — sending requires approval)
• /orula/data-quality/scan, /orula/risk/basic-signals
• /orula/tasks/{evaluate,feedback}

Gu — port 11445

• /gu/{health,status,alerts,metrics/summary,policy}
• /gu/lock-mode/{recommend,enable,disable} (disruptive ones need approval)
• /gu/support-session/{request,approve,revoke}
• /gu/events/{evaluate,feedback}

Ollama — port 11434

Standard Ollama API. Called only by Orula in RC1.

Detailed schemas land in OpenAPI form post-RC1. The agent contracts are documented in ORULA_AGENT_V0.md and GU_AGENT_V0.md.