# Base316 API

Identity, entitlements and billing. Authenticate with `Authorization: Bearer <key>`.
`b316_sk_` keys are secret and act from a server; `b316_pk_` keys are publishable and may only read.

Every write accepts an `Idempotency-Key` header: a retry with the same key replays the
original response rather than performing the write twice. A secret key's keys are shared by
the environment; a browser's are its own: scoped to the end user's session, or to the
caller's address when there is none.

Every error carries `error.code`, `error.fix` and `error.docs`, and names the offending
field as `error.param` when there is one.

Machine-readable: https://api.base316.com/openapi.json

## Endpoints

- `GET /`
- `GET /.well-known/oauth-authorization-server/oidc/:environmentId`
- `GET /.well-known/openid-configuration/oidc/:environmentId`
- `GET /agreements/:environmentId`
- `POST /agreements/:environmentId/activate`
- `POST /agreements/:environmentId/card`
- `GET /agreements/:environmentId/card/complete`
- `POST /agreements/:environmentId/code`
- `GET /agreements/:environmentId/document.pdf`
- `GET /agreements/:environmentId/open`
- `POST /agreements/:environmentId/open`
- `POST /agreements/:environmentId/relink`
- `POST /agreements/:environmentId/sign`
- `POST /agreements/:environmentId/verify`
- `GET /health` — Liveness check.
- `GET /llms.txt`
- `GET /openapi.json`
- `GET /scim/v2/:environmentId/Groups`
- `POST /scim/v2/:environmentId/Groups`
- `DELETE /scim/v2/:environmentId/Groups/:id`
- `GET /scim/v2/:environmentId/Groups/:id`
- `PATCH /scim/v2/:environmentId/Groups/:id`
- `GET /scim/v2/:environmentId/ResourceTypes`
- `GET /scim/v2/:environmentId/ServiceProviderConfig`
- `GET /scim/v2/:environmentId/Users`
- `POST /scim/v2/:environmentId/Users`
- `DELETE /scim/v2/:environmentId/Users/:id`
- `GET /scim/v2/:environmentId/Users/:id`
- `PATCH /scim/v2/:environmentId/Users/:id`
- `PUT /scim/v2/:environmentId/Users/:id`
- `POST /v1/access/check` — Decide whether a customer may use a feature.
- `GET /v1/addons` — List addons.
- `POST /v1/addons` — Create an addon.
- `DELETE /v1/addons/:id` — Archive an addon.
- `PATCH /v1/addons/:id` — Rename or reprice an addon.
- `POST /v1/addons/attached` — Attach an addon to a subscription.
- `DELETE /v1/addons/attached/:id` — Detach an addon.
- `PATCH /v1/addons/attached/:id` — Change an attached quantity.
- `GET /v1/addons/attached/:subscriptionId` — List the addons a subscription carries.
- `GET /v1/agreements`
- `POST /v1/agreements`
- `GET /v1/agreements/:id`
- `GET /v1/agreements/:id/certificate`
- `POST /v1/agreements/:id/documents`
- `GET /v1/agreements/:id/documents/:versionId/pdf`
- `GET /v1/agreements/:id/events`
- `POST /v1/agreements/:id/resend`
- `POST /v1/agreements/:id/revoke`
- `POST /v1/agreements/:id/send`
- `POST /v1/agreements/import`
- `GET /v1/api-clients`
- `POST /v1/api-clients`
- `GET /v1/api-resources`
- `POST /v1/api-resources`
- `DELETE /v1/api-resources/:id`
- `GET /v1/api-resources/:id`
- `PATCH /v1/api-resources/:id`
- `POST /v1/api-resources/:id/scopes`
- `DELETE /v1/api-resources/:id/scopes/:key`
- `GET /v1/audit-logs` — Read the audit trail.
- `GET /v1/auth-config/hosted` — Read the hosted sign-in configuration.
- `PUT /v1/auth-config/hosted` — Replace the hosted sign-in configuration.
- `GET /v1/auth-config/providers` — List social sign-in providers.
- `DELETE /v1/auth-config/providers/:provider` — Remove a provider.
- `PUT /v1/auth-config/providers/:provider` — Configure a social provider.
- `GET /v1/auth-config/sso` — List SSO connections.
- `POST /v1/auth-config/sso` — Create an SSO connection.
- `DELETE /v1/auth-config/sso/:id` — Remove an SSO connection.
- `GET /v1/auth-config/sso/:id` — Read one SSO connection.
- `PATCH /v1/auth-config/sso/:id` — Update an SSO connection.
- `POST /v1/auth-config/sso/:id/enabled` — Enable or disable a connection.
- `DELETE /v1/auth-hooks`
- `GET /v1/auth-hooks`
- `PUT /v1/auth-hooks`
- `GET /v1/auth-policy`
- `PATCH /v1/auth-policy`
- `POST /v1/auth/code/exchange`
- `GET /v1/auth/connected-apps`
- `DELETE /v1/auth/connected-apps/:clientId`
- `GET /v1/auth/events`
- `POST /v1/auth/impersonate`
- `POST /v1/auth/magic-link/request`
- `POST /v1/auth/magic-link/verify`
- `GET /v1/auth/me/data`
- `POST /v1/auth/me/erase`
- `POST /v1/auth/me/password`
- `POST /v1/auth/mfa/confirm`
- `POST /v1/auth/mfa/disable`
- `POST /v1/auth/mfa/email/enroll`
- `POST /v1/auth/mfa/enroll`
- `GET /v1/auth/mfa/factors`
- `POST /v1/auth/mfa/required/complete`
- `POST /v1/auth/mfa/required/start`
- `POST /v1/auth/mfa/resend`
- `POST /v1/auth/mfa/sms/enroll`
- `POST /v1/auth/mfa/verify`
- `GET /v1/auth/passkeys`
- `DELETE /v1/auth/passkeys/:id`
- `POST /v1/auth/passkeys/register/finish`
- `POST /v1/auth/passkeys/register/start`
- `POST /v1/auth/passkeys/signin/finish`
- `POST /v1/auth/passkeys/signin/start`
- `GET /v1/auth/password-policy`
- `POST /v1/auth/password/reset`
- `POST /v1/auth/password/reset-request`
- `POST /v1/auth/phone/start`
- `POST /v1/auth/phone/verification/confirm`
- `POST /v1/auth/phone/verification/start`
- `POST /v1/auth/phone/verify`
- `GET /v1/auth/session`
- `GET /v1/auth/sessions`
- `POST /v1/auth/sessions/revoke-all`
- `POST /v1/auth/signin`
- `POST /v1/auth/signout`
- `POST /v1/auth/signup` — Create an end user's account.
- `POST /v1/auth/verify-email`
- `POST /v1/billing-portal/sessions` — Open the hosted billing portal for a customer.
- `GET /v1/cancellations` — List cancellation attempts, newest first.
- `GET /v1/cancellations/:id` — Get a cancellation attempt.
- `POST /v1/cancellations/:id/accept` — Accept the retention offer on a cancellation attempt.
- `POST /v1/cancellations/:id/confirm` — Go ahead with a cancellation attempt.
- `POST /v1/checkout/sessions`
- `GET /v1/collections`
- `POST /v1/collections`
- `DELETE /v1/collections/:key`
- `GET /v1/collections/:key`
- `PATCH /v1/collections/:key`
- `POST /v1/collections/:key/fields`
- `DELETE /v1/collections/:key/fields/:field`
- `PATCH /v1/collections/:key/fields/:field`
- `GET /v1/collections/:key/records`
- `POST /v1/collections/:key/records`
- `DELETE /v1/collections/:key/records/:id`
- `GET /v1/collections/:key/records/:id`
- `PATCH /v1/collections/:key/records/:id`
- `GET /v1/collections/:key/schema`
- `GET /v1/collections/:key/titles`
- `GET /v1/coupons`
- `POST /v1/coupons` — Define a coupon.
- `DELETE /v1/coupons/:id` — Archive a coupon.
- `GET /v1/credit-notes`
- `POST /v1/credit-notes` — Issue a credit note — and refund it.
- `GET /v1/credit-notes/:id/pdf` — Download a credit note as a PDF.
- `POST /v1/credit-notes/:id/void` — Void a credit note.
- `GET /v1/credit-packs` — List credit packs.
- `POST /v1/credit-packs` — Create a credit pack.
- `DELETE /v1/credit-packs/:id` — Archive a credit pack.
- `PATCH /v1/credit-packs/:id` — Reprice or rename a credit pack.
- `POST /v1/credit-packs/checkout` — Start a credit pack purchase.
- `GET /v1/credit-packs/purchases` — List a customer's credit pack purchases.
- `GET /v1/credits`
- `POST /v1/credits`
- `POST /v1/credits-portal/sessions` — Open the hosted credits page for a customer.
- `PUT /v1/credits/alert` — Set a customer's low-balance threshold.
- `GET /v1/credits/auto-recharge` — Get a customer's auto-recharge settings.
- `PUT /v1/credits/auto-recharge` — Set a customer's auto-recharge.
- `GET /v1/credits/balance` — Get a customer's balance on a metered feature.
- `POST /v1/credits/refund` — Refund a customer's unused purchased credit for a feature.
- `GET /v1/custom-fields`
- `GET /v1/customers`
- `POST /v1/customers` — Create a customer.
- `GET /v1/customers/:id`
- `PATCH /v1/customers/:id` — Update a customer.
- `GET /v1/customers/:id/billed`
- `GET /v1/customers/:id/entitlements` — Evaluate every feature for a customer.
- `POST /v1/customers/:id/merge`
- `POST /v1/customers/:id/merge-preview`
- `GET /v1/customers/:id/payment-methods` — List a customer's saved cards.
- `DELETE /v1/customers/:id/payment-methods/:paymentMethodId` — Remove a saved card.
- `POST /v1/customers/:id/payment-methods/:paymentMethodId/default` — Make a saved card the default.
- `GET /v1/customers/:id/tax-ids` — List a customer's tax ids.
- `POST /v1/customers/:id/tax-ids` — Add a tax id to a customer.
- `DELETE /v1/customers/:id/tax-ids/:taxIdId` — Remove a tax id from a customer.
- `POST /v1/customers/:id/tax-ids/:taxIdId/verify` — Check a tax id with VIES again, now.
- `GET /v1/customers/health`
- `POST /v1/customers/link-tenants`
- `POST /v1/device/decide`
- `POST /v1/device/lookup`
- `GET /v1/dunning`
- `PATCH /v1/dunning`
- `GET /v1/email-domains`
- `POST /v1/email-domains` — Add a sending domain.
- `DELETE /v1/email-domains/:id`
- `PATCH /v1/email-domains/:id` — Change a sending domain's from address, from name or reply-to.
- `POST /v1/email-domains/:id/default`
- `POST /v1/email-domains/:id/refresh`
- `GET /v1/email-templates` — List transactional email templates.
- `DELETE /v1/email-templates/:key` — Remove a template.
- `PUT /v1/email-templates/:key` — Create or replace a template.
- `POST /v1/events` — Record a usage event.
- `GET /v1/export/:resource`
- `GET /v1/features`
- `POST /v1/features`
- `DELETE /v1/features/:id`
- `GET /v1/features/:id`
- `PATCH /v1/features/:id`
- `POST /v1/fga/check` — Check whether a user has a relation to an object.
- `POST /v1/fga/list-objects` — List the objects of a type a user has a relation to.
- `POST /v1/fga/list-users` — List the users with a relation to an object.
- `GET /v1/fga/model` — Read the environment's authorization model, as DSL and JSON.
- `PUT /v1/fga/model` — Replace the authorization model.
- `GET /v1/fga/tuples` — Read stored relationship tuples, paged.
- `POST /v1/fga/write` — Write and delete relationship tuples atomically.
- `POST /v1/import/:resource`
- `GET /v1/import/:resource/template`
- `GET /v1/integrations` — List accounting and CRM connections.
- `GET /v1/invitations/:token`
- `POST /v1/invitations/:token/accept`
- `GET /v1/invoices`
- `POST /v1/invoices`
- `GET /v1/invoices/:id`
- `POST /v1/invoices/:id/finalize`
- `POST /v1/invoices/:id/pay`
- `GET /v1/invoices/:id/payment-links`
- `POST /v1/invoices/:id/payment-links`
- `DELETE /v1/invoices/:id/payment-links/:linkId`
- `GET /v1/invoices/:id/payments`
- `POST /v1/invoices/:id/payments`
- `POST /v1/invoices/:id/payments/:paymentId/reverse`
- `GET /v1/invoices/:id/pdf` — Download an invoice as a PDF.
- `POST /v1/invoices/:id/void`
- `GET /v1/log-streams`
- `POST /v1/log-streams` — Add a log stream.
- `DELETE /v1/log-streams/:id`
- `PATCH /v1/log-streams/:id` — Update a log stream.
- `POST /v1/log-streams/:id/enabled`
- `GET /v1/me/api-credentials`
- `POST /v1/me/api-credentials`
- `DELETE /v1/me/api-credentials/:clientId`
- `POST /v1/me/api-credentials/:clientId/rotate`
- `GET /v1/me/api-resources`
- `GET /v1/me/billing-details` — The signed-in user's billing address and tax ids.
- `PATCH /v1/me/billing-details` — Set the signed-in user's billing address and tax ids.
- `POST /v1/me/checkout/sessions`
- `GET /v1/me/credits` — The signed-in user's credit balances, packs on sale, auto-recharge and purchases.
- `PUT /v1/me/credits/auto-recharge` — Set the signed-in user's auto-recharge for one metered feature.
- `POST /v1/me/credits/purchase` — Buy a credit pack for the signed-in user.
- `GET /v1/me/invoices`
- `GET /v1/me/invoices/:id`
- `POST /v1/me/invoices/:id/pay-link` — A link to pay one of the signed-in user's own open invoices.
- `GET /v1/me/invoices/:id/pdf` — Download one of the signed-in user's own invoices as a PDF.
- `GET /v1/me/organizations`
- `GET /v1/me/organizations/:id/invitations`
- `POST /v1/me/organizations/:id/invitations`
- `DELETE /v1/me/organizations/:id/invitations/:invitationId`
- `GET /v1/me/organizations/:id/members`
- `DELETE /v1/me/organizations/:id/members/:userId`
- `GET /v1/me/payment-method` — The signed-in user's card on file.
- `POST /v1/me/payment-method/update-session` — Start replacing the signed-in user's card on a Stripe-hosted page.
- `GET /v1/me/payment-methods` — Every card the signed-in user's account has saved.
- `DELETE /v1/me/payment-methods/:id` — Remove one of the signed-in user's saved cards.
- `POST /v1/me/payment-methods/:id/default` — Make one of the signed-in user's saved cards the default.
- `GET /v1/me/subscription`
- `POST /v1/me/subscription/cancel` — Cancel the signed-in user's subscription at the period end, in one step.
- `POST /v1/me/subscription/cancellation` — Start cancelling the signed-in user's subscription.
- `POST /v1/me/subscription/cancellation/:id/accept` — Accept the retention offer and stay.
- `POST /v1/me/subscription/cancellation/:id/confirm` — Decline the offer and cancel at the period end.
- `POST /v1/me/subscription/change` — Change the signed-in user's plan.
- `GET /v1/me/subscription/plan-change-preview` — Preview a plan change for the signed-in user.
- `POST /v1/me/subscription/quantity` — Change the signed-in user's seat count.
- `GET /v1/me/subscription/quantity/preview` — Preview a change to the signed-in user's seat count.
- `POST /v1/me/subscription/resume` — Undo the signed-in user's scheduled cancellation.
- `DELETE /v1/me/subscription/scheduled-change` — Undo the signed-in user's scheduled plan change.
- `GET /v1/me/subscription/upcoming-invoice` — Preview the signed-in user's next invoice.
- `GET /v1/meters`
- `POST /v1/meters`
- `DELETE /v1/meters/:id`
- `GET /v1/meters/:id`
- `PATCH /v1/meters/:id`
- `GET /v1/organizations`
- `POST /v1/organizations`
- `DELETE /v1/organizations/:id` — Delete an organization.
- `PATCH /v1/organizations/:id`
- `GET /v1/organizations/:id/branding`
- `PUT /v1/organizations/:id/branding`
- `GET /v1/organizations/:id/children`
- `POST /v1/organizations/:id/client-checkout` — A hosted checkout for a client to buy one of its firm's plans.
- `GET /v1/organizations/:id/client-packs` — The credit packs a firm sells its clients.
- `POST /v1/organizations/:id/client-packs` — Create a credit pack a firm sells its clients.
- `PATCH /v1/organizations/:id/client-packs/:packId` — Change a firm's client pack's name, price or expiry.
- `POST /v1/organizations/:id/client-packs/:packId/archive` — Take a firm's client pack off sale.
- `PUT /v1/organizations/:id/client-plan` — Put a client on one of its firm's plans, without a checkout.
- `GET /v1/organizations/:id/client-plans` — The plans a firm sells its clients.
- `POST /v1/organizations/:id/client-plans` — Create a plan a firm sells its clients.
- `PATCH /v1/organizations/:id/client-plans/:planId` — Rename a firm's client plan, or publish new terms for it.
- `POST /v1/organizations/:id/client-plans/:planId/archive` — Take a firm's client plan off sale.
- `POST /v1/organizations/:id/client-portal` — A billing-portal link for a client of a reselling firm.
- `POST /v1/organizations/:id/detach`
- `DELETE /v1/organizations/:id/domain`
- `GET /v1/organizations/:id/domain`
- `POST /v1/organizations/:id/domain`
- `POST /v1/organizations/:id/domain/verify`
- `GET /v1/organizations/:id/inherited-roles`
- `PUT /v1/organizations/:id/inherited-roles`
- `GET /v1/organizations/:id/margins` — Per client, retail revenue against wholesale cost.
- `POST /v1/organizations/:id/members`
- `DELETE /v1/organizations/:id/members/:userId`
- `GET /v1/organizations/:id/payment-account` — A firm's own Stripe account.
- `POST /v1/organizations/:id/payment-account` — Connect a firm's Stripe account and start onboarding.
- `POST /v1/organizations/:id/payment-account/onboarding-link` — A fresh onboarding URL for a firm's account.
- `POST /v1/organizations/:id/payment-account/refresh` — Pull a firm's account state from Stripe.
- `POST /v1/organizations/:id/payment-account/session` — An Account Session for Stripe's embedded components on a firm's account.
- `GET /v1/organizations/:id/reseller-settings` — A firm's reseller settings.
- `PATCH /v1/organizations/:id/reseller-settings` — Change what a client's failed payment does.
- `GET /v1/payment-accounts` — The connected Stripe account for this environment.
- `POST /v1/payment-accounts` — Connect an account and start onboarding.
- `POST /v1/payment-accounts/onboarding-link` — Mint a fresh onboarding URL.
- `POST /v1/payment-accounts/refresh` — Pull fresh account state from Stripe.
- `DELETE /v1/payment-credentials`
- `GET /v1/payment-credentials`
- `PUT /v1/payment-credentials`
- `GET /v1/pending-charges` — List one-off charges awaiting the next invoice.
- `POST /v1/pending-charges` — Raise a one-off charge.
- `DELETE /v1/pending-charges/:id` — Void a charge before it is invoiced.
- `GET /v1/permissions`
- `POST /v1/permissions`
- `DELETE /v1/permissions/:id`
- `GET /v1/permissions/:id`
- `PATCH /v1/permissions/:id`
- `GET /v1/plan-migrations/:id`
- `GET /v1/plans` — List plans with their versions, newest first.
- `POST /v1/plans` — Create a plan and its first version.
- `DELETE /v1/plans/:id`
- `GET /v1/plans/:id` — Read one plan with its versions.
- `PATCH /v1/plans/:id`
- `PUT /v1/plans/:id/family`
- `GET /v1/plans/:id/migrations`
- `POST /v1/plans/:id/versions` — Add a version to a plan — published, or as a draft.
- `DELETE /v1/plans/:id/versions/:versionId` — Discard a draft version.
- `PATCH /v1/plans/:id/versions/:versionId` — Edit a draft version in place.
- `POST /v1/plans/:id/versions/:versionId/migration-preview`
- `POST /v1/plans/:id/versions/:versionId/migrations`
- `POST /v1/plans/:id/versions/:versionId/publish` — Publish a draft version.
- `POST /v1/portal-sessions`
- `GET /v1/processed-transactions`
- `GET /v1/product-families`
- `POST /v1/product-families`
- `DELETE /v1/product-families/:id`
- `PATCH /v1/product-families/:id`
- `GET /v1/public/addons` — List the addons on sale.
- `GET /v1/public/branding`
- `GET /v1/public/credit-packs` — List the credit packs on sale.
- `GET /v1/public/plans`
- `GET /v1/quotes`
- `POST /v1/quotes`
- `GET /v1/quotes/:id`
- `POST /v1/quotes/:id/accept`
- `POST /v1/quotes/:id/decline`
- `GET /v1/quotes/:id/pdf` — Download a quote as a PDF.
- `POST /v1/quotes/:id/send`
- `GET /v1/rate-limits`
- `PUT /v1/rate-limits`
- `DELETE /v1/rate-limits/:id`
- `GET /v1/refunds` — List refunds.
- `GET /v1/refunds/:id` — Get a refund.
- `POST /v1/refunds/:id/credit-to-wallet` — Credit a failed refund to the wallet instead.
- `GET /v1/reports/ageing` — Receivables by age.
- `GET /v1/reports/mrr` — Monthly recurring revenue, by currency.
- `GET /v1/reseller` — Reseller mode for this environment.
- `PUT /v1/reseller` — Turn reseller mode on or off.
- `GET /v1/reseller/accounts` — Every firm's connected account, with its client count.
- `GET /v1/reseller/catalogs` — Every firm's own client plans and packs, read-only.
- `GET /v1/retention` — The retention offer's settings.
- `PATCH /v1/retention` — Change the retention offer.
- `GET /v1/retention/report` — How the retention offer is doing.
- `GET /v1/roles`
- `POST /v1/roles`
- `DELETE /v1/roles/:id`
- `GET /v1/roles/:id`
- `PATCH /v1/roles/:id`
- `GET /v1/saml-applications`
- `POST /v1/saml-applications`
- `DELETE /v1/saml-applications/:id`
- `GET /v1/saml-applications/:id`
- `PATCH /v1/saml-applications/:id`
- `GET /v1/saml-applications/idp`
- `POST /v1/saml-applications/idp/rotate`
- `GET /v1/seed`
- `POST /v1/seed`
- `GET /v1/subscriptions`
- `POST /v1/subscriptions` — Subscribe a customer to a plan version.
- `DELETE /v1/subscriptions/:id`
- `GET /v1/subscriptions/:id`
- `POST /v1/subscriptions/:id/cancellations` — Start cancelling a subscription.
- `PATCH /v1/subscriptions/:id/contract` — Set a subscription's PO number, invoice memo or billing day.
- `GET /v1/subscriptions/:id/contract/billing-anchor-preview` — Preview a billing-day change.
- `DELETE /v1/subscriptions/:id/discounts`
- `GET /v1/subscriptions/:id/discounts`
- `POST /v1/subscriptions/:id/discounts`
- `DELETE /v1/subscriptions/:id/phases` — Withdraw a subscription's pending schedule.
- `GET /v1/subscriptions/:id/phases` — List a subscription's scheduled phases.
- `PUT /v1/subscriptions/:id/phases` — Set a subscription's schedule of phases (a ramp).
- `POST /v1/subscriptions/:id/plan-change` — Change a subscription's plan, now or at the period end.
- `GET /v1/subscriptions/:id/plan-change-preview` — Preview a plan change, now and at the period end.
- `GET /v1/subscriptions/:id/price-overrides` — List a subscription's custom prices.
- `POST /v1/subscriptions/:id/price-overrides` — Give a subscription a custom price.
- `DELETE /v1/subscriptions/:id/price-overrides/:overrideId` — Remove a custom price.
- `PATCH /v1/subscriptions/:id/price-overrides/:overrideId` — Change a custom price.
- `PATCH /v1/subscriptions/:id/quantity` — Change a subscription's quantity, prorated.
- `GET /v1/subscriptions/:id/quantity/preview` — Preview a quantity change.
- `POST /v1/subscriptions/:id/resume` — Undo a cancellation scheduled for the period end.
- `GET /v1/subscriptions/:id/upcoming-invoice` — Preview the subscription's next invoice.
- `GET /v1/subscriptions/outdated`
- `GET /v1/tax-rates`
- `POST /v1/tax-rates` — Define a tax rate.
- `DELETE /v1/tax-rates/:id` — Archive a tax rate.
- `DELETE /v1/test-clocks`
- `GET /v1/test-clocks`
- `POST /v1/test-clocks`
- `POST /v1/test-clocks/advance`
- `GET /v1/trusted-issuers` — List the external issuers this environment trusts for workload identity.
- `POST /v1/trusted-issuers` — Trust an external issuer in the JWT bearer grant.
- `DELETE /v1/trusted-issuers/:id` — Stop trusting an issuer.
- `GET /v1/trusted-issuers/:id` — Read one trusted issuer.
- `PATCH /v1/trusted-issuers/:id` — Change a trusted issuer. `rules`, when sent, replaces the whole list.
- `POST /v1/trusted-issuers/test` — Verify a workload token without minting anything, and say why it matched or not.
- `GET /v1/users`
- `POST /v1/users`
- `GET /v1/users/:id`
- `PATCH /v1/users/:id`
- `GET /v1/users/:id/connected-apps`
- `DELETE /v1/users/:id/connected-apps/:clientId`
- `POST /v1/users/:id/disable`
- `POST /v1/users/:id/enable`
- `DELETE /v1/users/:userId`
- `GET /v1/users/:userId/data`
- `GET /v1/wallets`
- `GET /v1/wallets/:customerId`
- `POST /v1/wallets/credit`
- `POST /v1/wallets/debit`
- `GET /v1/webhooks/deliveries` — List recent delivery attempts.
- `GET /v1/webhooks/endpoints` — List webhook endpoints.
- `POST /v1/webhooks/endpoints` — Register a webhook endpoint.
- `DELETE /v1/webhooks/endpoints/:id` — Remove an endpoint.
- `PATCH /v1/webhooks/endpoints/:id` — Update an endpoint: URL, description, event types, or disabled.
- `GET /v1/webhooks/events`
- `POST /v1/webhooks/events/:id/replay` — Send an event again.
- `GET /v1/whoami` — Describe the scope this key resolves to.