Contents
Account management for users and organizations
Permanently delete an account and all associated data. Requires owner permissions. This action cannot be undone. More Applications
Responses
Retrieve an account by its ID. Returns the account’s status, billing info, and hierarchy position. More Applications
Responses
Update account properties using JSON Merge Patch (RFC 7396). Supports updating name, avatar, status, and billing dates. More Applications
Body application/json
Responses
List child accounts under a parent account. Returns paginated results for nested account hierarchies. More Applications
Responses
Create a new child account under a parent account. Used for nested account hierarchies where organizations manage sub-organizations. More Applications
Body application/json
Responses
Register a new OAuth client application for an account. Configure origins, redirect URIs, and token settings. More OAuth
Body application/json
Responses
Body application/json
Responses
List file metadata for an account by prefix.
Responses
Generate presigned URLs for file writes and coordinate multipart uploads.
Body application/json
Responses
Generate presigned URLs for file writes and coordinate multipart uploads.
Body application/json
Responses
Generate presigned URLs for file writes and coordinate multipart uploads.
Body application/json
Responses
Generate presigned URLs for file writes and coordinate multipart uploads.
Body application/json
Responses
Generate presigned URLs for file writes and coordinate multipart uploads.
Body application/json
Responses
Generate presigned URLs for file writes and coordinate multipart uploads.
Body application/json
Responses
Send an invitation to join an existing account.
- Creates a pending invitation
- Send email via system
- Supports role-based access (admin/member/viewer)
Invitations eventually expire. Users accept via email link or manually entered URL.
Body application/json
Responses
List all invoices within an account. Returns invoice history including amounts, status, and external references. Subscriptions
Responses
Delete invoices matching a Lucene-style query. Use dry_run=true to preview what would be deleted.
Supported fields:
external_id:- Search provider invoice ID (e.g., Stripe invoice)external_customer_id:- Search provider customer IDstatus:- Filter by status (draft, open, paid, void, uncollectible)currency:- Filter by currency (e.g., usd)
Operators:
AND- Both conditions must matchOR- Either condition must match*- Wildcard (e.g.,external_id:in_*)
Safety:
- Use
dry_run: truefirst to verify the query matches expected invoices - The
limitparameter caps deletions (default 100)
Body application/json
Responses
List all users who are members of an account with their roles. Returns paginated results including user profiles and email credentials. More Applications
Responses
Add an existing user as a member of an account with a specified role. Use for granting access to shared accounts. More Applications
Body application/json
Responses
Remove a user’s membership from an account. The user remains in the system but loses access to this account. More Applications
Responses
Retrieve a specific member’s details within an account, including their role and profile. More Applications
Responses
Update a member’s role within an account. Roles control access levels: owner, member, or viewer. More Applications
Body application/json
Responses
List all payments within an account. Returns payment history including amounts, statuses, and associated metadata. More Subscriptions
Responses
Create a new payment record for an account. Used for manual payment tracking or integrations with external payment systems. More Subscriptions
Body application/json
Responses
Delete payments matching a Lucene-style query. Use dry_run=true to preview what would be deleted.
Supported fields:
external_id:- Search provider payment ID (e.g., Stripe charge/payment intent)external_customer_id:- Search provider customer IDstatus:- Filter by status (pending, succeeded, failed, canceled, refunded)currency:- Filter by currency (e.g., usd)payment_method:- Filter by payment method (card, ach, etc.)
Operators:
AND- Both conditions must matchOR- Either condition must match*- Wildcard (e.g.,external_id:ch_*)
Safety:
- Use
dry_run: truefirst to verify the query matches expected payments - The
limitparameter caps deletions (default 100)
Body application/json
Responses
Issue an access_token that is scoped to a single account.
Most services in a system should not know about tenants, subaccounts, or membership graphs. Those services only need a simple token with a user id (uid) and an account id (acc) so that local authorization logic can run.
Use this endpoint after login to derive an access token for one specific account that the current user belongs to. The returned access_token:
- sets
accto the requested account_id - sets
roleto the user’s role in that account (for example: owner or member) - keeps or overrides
audandscopebased on the request body
Downstream services (email, file storage, billing, etc.) can then:
- validate the token using the client’s public keys at
/.well-known/jwks.json?client_id={client_id}, and - apply local rules based only on
uid,acc,role,aud, andscope.
This endpoint does not return or set any cookies, and does not issue a refresh_token. The original login access_token and refresh_token should be kept and used to call this endpoint again whenever a new account-scoped access_token is needed.
Body application/json
Responses
List accounts created under an application. Returns paginated results. More Applications
Responses
Search accounts created under an application using Lucene syntax. More
Body application/json
Responses
Create a new account under an application, with an initial owner user.
This endpoint is used to:
- Register a new paid account (e.g., a customer, tenant, or organization)
- Automatically create its first admin user with email/password
Use cases:
- SaaS platforms onboarding new customers
- Agencies creating client accounts
- Multi-tenant systems provisioning tenants
If no password is provided, the user must set one later (e.g., via magic link).
Body application/json
Responses
List all users belonging to an application. Returns paginated results with user profiles. More Applications
Responses
Create a new user within an application. Used for backend provisioning of users without self-registration. More Applications
Body application/json
Responses
Search users under an application using Lucene syntax. More