Wireless Joint

Sounds like the http://.../srv/status call.
It's what the web page uses (regardless of login status) to get data like:
...
"statusBarBand": "n71",
"statusBarBandwidth": "15 MHz",
...
"statusBarNetwork": "T-Mobile",
"statusBarNetworkID": "310260",
...
"statusBarSNR": "15",
"statusBarSignalBars ...

Thank you for sharing this info! I have long been interested in scheduling restarts of my hotspot, because it intermittently decides to drop Internet connection, even though the admin UI says there is no issue. Just need to figure out how to login remotely, and I'd be all the way there. Thank you ...

A couple of more:
http://192.168.2.1/apps_home/checkforupdate
http://192.168.2.1/apps_home/help - returns http 500 instead of 404

I really could do a lot more with a dump of the firmware data segment(s)!

First, note that at this point, I am just using a browser to sniff with.
Postman will come in a bit - for example, to programatically login to the MiFi.

Second, I believe that this effort will likely apply to any Inseego whose web interface is similar to a MiFi.
I worked with an FX2000 a while back ...

I am working on access to the M3100 (and others) via their REST API.

I've gathered a few items so far - some are even useful.
These all work on M2000 & M3100.
Note: I use 192.168.2.1 for MiFi (obviously).
http://192.168.2.1/restarting --- If logged in, this will trigger a restart
http://192.168.2.1 ...