POST /points/ GET /points/ GET /image/:file GET /tags/ You should remove the POST /points/ if you publish the website as it is pretty unsafe. It is used only with admin-page node index.js