AM
ZH-CN
免费开始
菜单

Contents

Account management for users and organizations

DELETE/api/accounts/{account_id}

Permanently delete an account and all associated data. Requires owner permissions. This action cannot be undone. More Applications

Responses
200application/json
OK
schemaobject
dataAccountrequired
Represents a billing container with domains and billing settings. Accounts form a hierarchy with applications where types alternate.
idstringrequired
Unique identifier for an account.
parent_idstring | nullrequired
Parent resource ID (application ID for accounts).
Variant
Unique identifier for an account.
Option 1string
Unique identifier for an account.
Unique identifier for an application.
Option 2string
Unique identifier for an application.
namestring | null
Display name for the account.
avatar_urlstring · uri | null
URL to the account's avatar image.
linksobjectrequired
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/api/accounts/{account_id}

Retrieve an account by its ID. Returns the account’s status, billing info, and hierarchy position. More Applications

Responses
200application/json
OK
schemaobject
dataAccountrequired
Represents a billing container with domains and billing settings. Accounts form a hierarchy with applications where types alternate.
idstringrequired
Unique identifier for an account.
parent_idstring | nullrequired
Parent resource ID (application ID for accounts).
Variant
Unique identifier for an account.
Option 1string
Unique identifier for an account.
Unique identifier for an application.
Option 2string
Unique identifier for an application.
namestring | null
Display name for the account.
avatar_urlstring · uri | null
URL to the account's avatar image.
linksobjectrequired
selfstringrequired
URL of the current resource
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
PATCH/api/accounts/{account_id}

Update account properties using JSON Merge Patch (RFC 7396). Supports updating name, avatar, status, and billing dates. More Applications

Body application/json
namestring | null
avatar_urlstring · uri | null
Responses
200application/json
OK
schemaobject
dataAccountrequired
Represents a billing container with domains and billing settings. Accounts form a hierarchy with applications where types alternate.
idstringrequired
Unique identifier for an account.
parent_idstring | nullrequired
Parent resource ID (application ID for accounts).
Variant
Unique identifier for an account.
Option 1string
Unique identifier for an account.
Unique identifier for an application.
Option 2string
Unique identifier for an application.
namestring | null
Display name for the account.
avatar_urlstring · uri | null
URL to the account's avatar image.
linksobjectrequired
selfstringrequired
URL of the created resource
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/api/accounts/{account_id}/accounts

List child accounts under a parent account. Returns paginated results for nested account hierarchies. More Applications

Responses
200application/json
OK
schemaobject
dataarrayrequired
itemAccountrequired
Represents a billing container with domains and billing settings. Accounts form a hierarchy with applications where types alternate.
idstringrequired
Unique identifier for an account.
parent_idstring | nullrequired
Parent resource ID (application ID for accounts).
Variant
Unique identifier for an account.
Option 1string
Unique identifier for an account.
Unique identifier for an application.
Option 2string
Unique identifier for an application.
namestring | null
Display name for the account.
avatar_urlstring · uri | null
URL to the account's avatar image.
linksobjectrequired
selfstringrequired
URL of the current page
nextstring
URL of the next page
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/accounts/{account_id}/accounts

Create a new child account under a parent account. Used for nested account hierarchies where organizations manage sub-organizations. More Applications

Body application/json
namestring
avatar_urlstring · uri
Responses
200application/json
OK
schemaobject
dataAccountrequired
Represents a billing container with domains and billing settings. Accounts form a hierarchy with applications where types alternate.
idstringrequired
Unique identifier for an account.
parent_idstring | nullrequired
Parent resource ID (application ID for accounts).
Variant
Unique identifier for an account.
Option 1string
Unique identifier for an account.
Unique identifier for an application.
Option 2string
Unique identifier for an application.
namestring | null
Display name for the account.
avatar_urlstring · uri | null
URL to the account's avatar image.
linksobjectrequired
selfstringrequired
URL of the created resource
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/api/accounts/{account_id}/clients

List all OAuth client applications registered under an account. Returns client configurations including origins and redirect URIs. More OAuth

Responses
200application/json
OK
schemaobject
dataarrayrequired
itemClientrequired
A client application that can authenticate users and request tokens. Clients define allowed origins, redirect URIs, and token configurations for OAuth flows.
idstringrequired
Unique identifier for a client application.
resource_idstringrequired
Variant
Unique identifier for an account.
Option 1string
Unique identifier for an account.
Unique identifier for an application.
Option 2string
Unique identifier for an application.
hostnamestring | nullrequired
Optional hostname that maps requests to this client when client_id is omitted.
issuerstringrequired
audiencestringrequired
allowed_originsarrayrequired
Nested fields truncated. Expand to continue inline, or use the model link.
allowed_scopestring | nullrequired
default_scopestringrequired
redirect_urisarrayrequired
Nested fields truncated. Expand to continue inline, or use the model link.
seamless_sign_inbooleanrequired
login_enabledbooleanrequired
register_enabledbooleanrequired
csrf_requiredbooleanrequired
email_provider_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
access_token_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Configuration for access tokens issued by this client. Access tokens are short-lived and authorize API requests on behalf of the user.
refresh_token_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Configuration for refresh tokens issued by this client. Refresh tokens are long-lived and allow obtaining new access tokens without re-authentication.
id_token_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Configuration for ID tokens issued by this client. ID tokens are JWTs containing user claims like email and name for client-side personalization.
external_jwks_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
saml_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
rate_limit_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Configuration for rate limiting client requests. Higher limits may be useful for testing environments.
linksobjectrequired
selfstringrequired
URL of the current page
nextstring
URL of the next page
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/accounts/{account_id}/clients

Register a new OAuth client application for an account. Configure origins, redirect URIs, and token settings. More OAuth

Body application/json
idstring
Unique identifier for a client application.
issuerstring
audiencestring
allowed_originsarray
itemstringrequired
allowed_scopestring | null
default_scopestring
redirect_urisarray
itemstringrequired
seamless_sign_inboolean
login_enabledboolean
register_enabledboolean
csrf_requiredboolean
email_provider_configobject | null
providerrequired
mock_inbox_idstringrequired
access_token_configobject | null
Configuration for access tokens issued by this client. Access tokens are short-lived and authorize API requests on behalf of the user.
expires_innumber
cookie_optionsobject
namestringrequired
http_onlyboolean
secureboolean
same_site
max_ageintegerrequired
pathstring
refresh_token_configobject | null
Configuration for refresh tokens issued by this client. Refresh tokens are long-lived and allow obtaining new access tokens without re-authentication.
expires_innumber
cookie_optionsobject
namestringrequired
http_onlyboolean
secureboolean
same_site
max_ageintegerrequired
pathstring
id_token_configobject | null
Configuration for ID tokens issued by this client. ID tokens are JWTs containing user claims like email and name for client-side personalization.
expires_innumber
cookie_optionsobject
namestringrequired
http_onlyboolean
secureboolean
same_site
max_ageintegerrequired
pathstring
external_jwks_configobject | null
jwks_urlstring
public_keysarray
itemstringrequired
saml_configobject | null
saml_metadata_urlstring
public_keysarray
itemstringrequired
expected_issuerstring
rate_limit_configobject | null
Configuration for rate limiting client requests. Higher limits may be useful for testing environments.
login_maxinteger
auth_maxinteger
unauth_maxinteger
hostnamestring | null
Optional hostname that maps requests to this client when client_id is omitted.
Responses
200application/json
OK
schemaobject
dataallOfrequired
Variant
A client application that can authenticate users and request tokens. Clients define allowed origins, redirect URIs, and token configurations for OAuth flows.
ClientClient
A client application that can authenticate users and request tokens. Clients define allowed origins, redirect URIs, and token configurations for OAuth flows.
idstringrequired
Unique identifier for a client application.
resource_idstringrequired
Variant
Unique identifier for an account.
Option 1string
Unique identifier for an account.
Unique identifier for an application.
Option 2string
Unique identifier for an application.
hostnamestring | nullrequired
Optional hostname that maps requests to this client when client_id is omitted.
issuerstringrequired
audiencestringrequired
allowed_originsarrayrequired
Nested fields truncated. Expand to continue inline, or use the model link.
allowed_scopestring | nullrequired
default_scopestringrequired
redirect_urisarrayrequired
Nested fields truncated. Expand to continue inline, or use the model link.
seamless_sign_inbooleanrequired
login_enabledbooleanrequired
register_enabledbooleanrequired
csrf_requiredbooleanrequired
email_provider_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
access_token_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Configuration for access tokens issued by this client. Access tokens are short-lived and authorize API requests on behalf of the user.
refresh_token_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Configuration for refresh tokens issued by this client. Refresh tokens are long-lived and allow obtaining new access tokens without re-authentication.
id_token_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Configuration for ID tokens issued by this client. ID tokens are JWTs containing user claims like email and name for client-side personalization.
external_jwks_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
saml_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
rate_limit_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Configuration for rate limiting client requests. Higher limits may be useful for testing environments.
Option 2object
secret_valuesarray
Nested fields truncated. Expand to continue inline, or use the model link.
linksobjectrequired
selfstringrequired
URL of the created resource
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/accounts/{account_id}/clients/search

Search OAuth clients registered under an account using Lucene syntax. More OAuth

Body application/json
querystringrequired
Lucene-style search query. Supports field:value syntax (id:, issuer:, audience:, hostname:, allowed_scope:, default_scope:), wildcards (*), and boolean operators (AND, OR).
limitinteger
offsetinteger
sort
Responses
200application/json
OK
schemaobject
dataarrayrequired
itemClientrequired
A client application that can authenticate users and request tokens. Clients define allowed origins, redirect URIs, and token configurations for OAuth flows.
idstringrequired
Unique identifier for a client application.
resource_idstringrequired
Variant
Unique identifier for an account.
Option 1string
Unique identifier for an account.
Unique identifier for an application.
Option 2string
Unique identifier for an application.
hostnamestring | nullrequired
Optional hostname that maps requests to this client when client_id is omitted.
issuerstringrequired
audiencestringrequired
allowed_originsarrayrequired
Nested fields truncated. Expand to continue inline, or use the model link.
allowed_scopestring | nullrequired
default_scopestringrequired
redirect_urisarrayrequired
Nested fields truncated. Expand to continue inline, or use the model link.
seamless_sign_inbooleanrequired
login_enabledbooleanrequired
register_enabledbooleanrequired
csrf_requiredbooleanrequired
email_provider_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
access_token_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Configuration for access tokens issued by this client. Access tokens are short-lived and authorize API requests on behalf of the user.
refresh_token_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Configuration for refresh tokens issued by this client. Refresh tokens are long-lived and allow obtaining new access tokens without re-authentication.
id_token_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Configuration for ID tokens issued by this client. ID tokens are JWTs containing user claims like email and name for client-side personalization.
external_jwks_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
saml_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
rate_limit_configobject | nullrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Configuration for rate limiting client requests. Higher limits may be useful for testing environments.
metaobjectrequired
querystringrequired
totalnumberrequired
limitnumberrequired
offsetnumberrequired
sortrequired
linksobjectrequired
selfstringrequired
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/api/accounts/{account_id}/files

List file metadata for an account by prefix.

Responses
200application/json
OK
schemaobject
dataarrayrequired
itemS3FileMetadatarequired
Metadata for a file stored in object storage.
keystringrequired
pathstringrequired
size_bytesnumberrequired
etagstring | nullrequired
last_modifiedstring · date-timerequired
storage_classstring | nullrequired
linksobjectrequired
selfstringrequired
URL of the current page
nextstring
URL of the next page
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/accounts/{account_id}/files/multipart/abort

Generate presigned URLs for file writes and coordinate multipart uploads.

Body application/json
pathstringrequired
upload_idstringrequired
Responses
200application/json
OK
schemaobject
Multipart upload abort response.
upload_idstringrequired
keystringrequired
linksobjectrequired
selfstringrequired
URL of the created resource
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/accounts/{account_id}/files/multipart/complete

Generate presigned URLs for file writes and coordinate multipart uploads.

Body application/json
pathstringrequired
upload_idstringrequired
partsarrayrequired
itemobjectrequired
part_numberintegerrequired
etagstringrequired
Responses
200application/json
OK
schemaobject
Multipart upload completion response.
upload_idstringrequired
keystringrequired
etagstring
locationstring
linksobjectrequired
selfstringrequired
URL of the created resource
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/accounts/{account_id}/files/multipart/init

Generate presigned URLs for file writes and coordinate multipart uploads.

Body application/json
pathstringrequired
content_typestring
Responses
200application/json
OK
schemaobject
Multipart upload initialization response.
upload_idstringrequired
keystringrequired
linksobjectrequired
selfstringrequired
URL of the created resource
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/accounts/{account_id}/files/multipart/part

Generate presigned URLs for file writes and coordinate multipart uploads.

Body application/json
pathstringrequired
upload_idstringrequired
part_numberintegerrequired
content_lengthintegerrequired
content_typestring
Responses
200application/json
OK
schemaobject
Presigned URL response for direct storage access.
urlstring · urirequired
headersobject
expires_atstring · date-timerequired
linksobjectrequired
selfstringrequired
URL of the created resource
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/accounts/{account_id}/files/presign

Generate presigned URLs for file writes and coordinate multipart uploads.

Body application/json
pathstringrequired
content_typestringrequired
content_lengthintegerrequired
Responses
200application/json
OK
schemaobject
Presigned URL response for direct storage access.
urlstring · urirequired
headersobject
expires_atstring · date-timerequired
linksobjectrequired
selfstringrequired
URL of the created resource
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/accounts/{account_id}/files/presign/delete

Generate presigned URLs for file writes and coordinate multipart uploads.

Body application/json
pathstringrequired
Responses
200application/json
OK
schemaobject
Presigned URL response for direct storage access.
urlstring · urirequired
headersobject
expires_atstring · date-timerequired
linksobjectrequired
selfstringrequired
URL of the created resource
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/accounts/{account_id}/invite

Send an invitation to join an existing account.

  • Creates a pending invitation
  • Send email via system
  • Supports role-based access (admin/member/viewer)

Invitations eventually expire. Users accept via email link or manually entered URL.

More

Body application/json
csrf_tokenstring
rolerequired
Responses
200application/json
OK
schemaobject
dataobjectrequired
invite_tokenstringrequired
expires_innumberrequired
linksobjectrequired
selfstringrequired
URL of the current resource
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/api/accounts/{account_id}/invoices

List all invoices within an account. Returns invoice history including amounts, status, and external references. Subscriptions

Responses
200application/json
OK
schemaobject
dataarrayrequired
itemobjectrequired
idstringrequired
Unique identifier for an invoice.
account_idstringrequired
Unique identifier for an account.
statusrequired
currencystringrequired
subtotal_centsintegerrequired
tax_centsintegerrequired
total_centsintegerrequired
period_startstring | nullrequired
period_endstring | nullrequired
issued_atstringrequired
due_atstring | nullrequired
paid_atstring | nullrequired
closed_atstring | nullrequired
external_idstring | nullrequired
external_customer_idstring | nullrequired
external_datarequired
hosted_invoice_urlstring | nullrequired
pdf_urlstring | nullrequired
linksobjectrequired
selfstringrequired
URL of the current page
nextstring
URL of the next page
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/accounts/{account_id}/invoices/search-delete

Delete invoices matching a Lucene-style query. Use dry_run=true to preview what would be deleted.

Supported fields:

  • external_id: - Search provider invoice ID (e.g., Stripe invoice)
  • external_customer_id: - Search provider customer ID
  • status: - Filter by status (draft, open, paid, void, uncollectible)
  • currency: - Filter by currency (e.g., usd)

Operators:

  • AND - Both conditions must match
  • OR - Either condition must match
  • * - Wildcard (e.g., external_id:in_*)

Safety:

  • Use dry_run: true first to verify the query matches expected invoices
  • The limit parameter caps deletions (default 100)

Subscriptions

Body application/json
querystringrequired
Lucene-style search query. Supports field:value syntax (external_id:, external_customer_id:, status:, currency:), wildcards (*), and boolean operators (AND, OR). Example: 'external_id:in_* AND status:paid'
dry_runboolean
If true, returns count of invoices that would be deleted without actually deleting
limitinteger
Maximum number of invoices to delete (default: 100, max: 10000). Use with caution.
Responses
200application/json
OK
schemaobject
dataobjectrequired
deleted_countnumberrequired
deleted_idsarrayrequired
itemstringrequired
Unique identifier for an invoice.
dry_runbooleanrequired
metaobjectrequired
querystringrequired
linksobjectrequired
selfstringrequired
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/api/accounts/{account_id}/members

List all users who are members of an account with their roles. Returns paginated results including user profiles and email credentials. More Applications

Responses
200application/json
OK
schemaobject
dataarrayrequired
itemallOfrequired
Variant
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
MembershipMembership
Nested fields truncated. Expand to continue inline, or use the model link.
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
Option 2object
Nested fields truncated. Expand to continue inline, or use the model link.
linksobjectrequired
selfstringrequired
URL of the current page
nextstring
URL of the next page
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/accounts/{account_id}/members

Add an existing user as a member of an account with a specified role. Use for granting access to shared accounts. More Applications

Body application/json
account_idstringrequired
Unique identifier for an account.
user_idstringrequired
Unique identifier for a user.
rolerequired
Responses
200application/json
OK
schemaobject
dataMembershiprequired
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
idstringrequired
Unique identifier for a membership.
account_idstringrequired
Unique identifier for an account.
user_idstringrequired
Unique identifier for a user.
rolerequired
linksobjectrequired
selfstringrequired
URL of the created resource
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
DELETE/api/accounts/{account_id}/members/{member_id}

Remove a user’s membership from an account. The user remains in the system but loses access to this account. More Applications

Responses
200application/json
OK
schemaobject
dataMembershiprequired
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
idstringrequired
Unique identifier for a membership.
account_idstringrequired
Unique identifier for an account.
user_idstringrequired
Unique identifier for a user.
rolerequired
linksobjectrequired
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/api/accounts/{account_id}/members/{member_id}

Retrieve a specific member’s details within an account, including their role and profile. More Applications

Responses
200application/json
OK
schemaobject
dataMembershiprequired
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
idstringrequired
Unique identifier for a membership.
account_idstringrequired
Unique identifier for an account.
user_idstringrequired
Unique identifier for a user.
rolerequired
linksobjectrequired
selfstringrequired
URL of the current resource
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
PATCH/api/accounts/{account_id}/members/{member_id}

Update a member’s role within an account. Roles control access levels: owner, member, or viewer. More Applications

Body application/json
rolerequired
Responses
200application/json
OK
schemaobject
dataobjectrequired
rolerequired
linksobjectrequired
selfstringrequired
URL of the current resource
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/api/accounts/{account_id}/payments

List all payments within an account. Returns payment history including amounts, statuses, and associated metadata. More Subscriptions

Responses
200application/json
OK
schemaobject
dataarrayrequired
itemPaymentrequired
A payment record tracking a monetary transaction for an account. Includes amount, currency, status, and external payment provider references.
idstringrequired
Unique identifier for a payment.
account_idstringrequired
Unique identifier for an account.
amount_centsnumberrequired
currencystringrequired
statusrequired
paid_atstring | nullrequired
payment_methodstring | nullrequired
external_idstring | nullrequired
external_customer_idstring | nullrequired
external_datarequired
linksobjectrequired
selfstringrequired
URL of the current page
nextstring
URL of the next page
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/accounts/{account_id}/payments

Create a new payment record for an account. Used for manual payment tracking or integrations with external payment systems. More Subscriptions

Body application/json
bodyobject
Responses
200application/json
OK
schemaobject
dataPaymentrequired
A payment record tracking a monetary transaction for an account. Includes amount, currency, status, and external payment provider references.
idstringrequired
Unique identifier for a payment.
account_idstringrequired
Unique identifier for an account.
amount_centsnumberrequired
currencystringrequired
statusrequired
paid_atstring | nullrequired
payment_methodstring | nullrequired
external_idstring | nullrequired
external_customer_idstring | nullrequired
external_datarequired
linksobjectrequired
selfstringrequired
URL of the created resource
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/accounts/{account_id}/payments/search-delete

Delete payments matching a Lucene-style query. Use dry_run=true to preview what would be deleted.

Supported fields:

  • external_id: - Search provider payment ID (e.g., Stripe charge/payment intent)
  • external_customer_id: - Search provider customer ID
  • status: - Filter by status (pending, succeeded, failed, canceled, refunded)
  • currency: - Filter by currency (e.g., usd)
  • payment_method: - Filter by payment method (card, ach, etc.)

Operators:

  • AND - Both conditions must match
  • OR - Either condition must match
  • * - Wildcard (e.g., external_id:ch_*)

Safety:

  • Use dry_run: true first to verify the query matches expected payments
  • The limit parameter caps deletions (default 100)

More Subscriptions

Body application/json
querystringrequired
Lucene-style search query. Supports field:value syntax (external_id:, external_customer_id:, status:, currency:, payment_method:), wildcards (*), and boolean operators (AND, OR). Example: 'external_id:ch_* AND status:failed'
dry_runboolean
If true, returns count of payments that would be deleted without actually deleting
limitinteger
Maximum number of payments to delete (default: 100, max: 10000). Use with caution.
Responses
200application/json
OK
schemaobject
dataobjectrequired
deleted_countnumberrequired
deleted_idsarrayrequired
itemstringrequired
Unique identifier for a payment.
dry_runbooleanrequired
metaobjectrequired
querystringrequired
linksobjectrequired
selfstringrequired
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/accounts/{account_id}/token

Issue an access_token that is scoped to a single account.

Most services in a system should not know about tenants, subaccounts, or membership graphs. Those services only need a simple token with a user id (uid) and an account id (acc) so that local authorization logic can run.

Use this endpoint after login to derive an access token for one specific account that the current user belongs to. The returned access_token:

  • sets acc to the requested account_id
  • sets role to the user’s role in that account (for example: owner or member)
  • keeps or overrides aud and scope based on the request body

Downstream services (email, file storage, billing, etc.) can then:

  1. validate the token using the client’s public keys at /.well-known/jwks.json?client_id={client_id}, and
  2. apply local rules based only on uid, acc, role, aud, and scope.

This endpoint does not return or set any cookies, and does not issue a refresh_token. The original login access_token and refresh_token should be kept and used to call this endpoint again whenever a new account-scoped access_token is needed.

More

Body application/json
scopestring
audiencestring
Responses
200application/json
OK
schemaobject
access_tokenstringrequired
token_typerequired
expires_innumberrequired
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/api/applications/{application_id}/accounts

List accounts created under an application. Returns paginated results. More Applications

Responses
200application/json
OK
schemaobject
dataarrayrequired
itemAccountrequired
Represents a billing container with domains and billing settings. Accounts form a hierarchy with applications where types alternate.
idstringrequired
Unique identifier for an account.
parent_idstring | nullrequired
Parent resource ID (application ID for accounts).
Variant
Unique identifier for an account.
Option 1string
Unique identifier for an account.
Unique identifier for an application.
Option 2string
Unique identifier for an application.
namestring | null
Display name for the account.
avatar_urlstring · uri | null
URL to the account's avatar image.
linksobjectrequired
selfstringrequired
URL of the current page
nextstring
URL of the next page
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/applications/{application_id}/accounts/search

Search accounts created under an application using Lucene syntax. More

Body application/json
querystringrequired
Lucene-style search query. Supports field:value syntax (id:, name:), wildcards (*), and boolean operators (AND, OR).
limitinteger
offsetinteger
sort
Responses
200application/json
OK
schemaobject
dataarrayrequired
itemAccountrequired
Represents a billing container with domains and billing settings. Accounts form a hierarchy with applications where types alternate.
idstringrequired
Unique identifier for an account.
parent_idstring | nullrequired
Parent resource ID (application ID for accounts).
Variant
Unique identifier for an account.
Option 1string
Unique identifier for an account.
Unique identifier for an application.
Option 2string
Unique identifier for an application.
namestring | null
Display name for the account.
avatar_urlstring · uri | null
URL to the account's avatar image.
metaobjectrequired
querystringrequired
totalnumberrequired
limitnumberrequired
offsetnumberrequired
sortrequired
linksobjectrequired
selfstringrequired
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/applications/{application_id}/register

Create a new account under an application, with an initial owner user.

This endpoint is used to:

  • Register a new paid account (e.g., a customer, tenant, or organization)
  • Automatically create its first admin user with email/password

Use cases:

  • SaaS platforms onboarding new customers
  • Agencies creating client accounts
  • Multi-tenant systems provisioning tenants

If no password is provided, the user must set one later (e.g., via magic link).

More

Body application/json
csrf_tokenstring
passwordstring
preferred_languagestring
localestring
timezonestring
Responses
200application/json
OK
schemaobject
dataobjectrequired
idstringrequired
Unique identifier for a user.
application_idstringrequired
Unique identifier for an application.
statusrequired
credentialsarrayrequired
itemEmailCredentialrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Associates an email address with a user for authentication. Used to look up users during login flows and verify email ownership.
membershipsarrayrequired
itemallOfrequired
Variant
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
MembershipMembership
Nested fields truncated. Expand to continue inline, or use the model link.
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
Option 2object
Nested fields truncated. Expand to continue inline, or use the model link.
linksobjectrequired
selfstringrequired
URL of the current resource
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/api/applications/{application_id}/users

List all users belonging to an application. Returns paginated results with user profiles. More Applications

Responses
200application/json
OK
schemaobject
dataarrayrequired
itemobjectrequired
idstringrequired
Unique identifier for a user.
application_idstringrequired
Unique identifier for an application.
statusrequired
identityUserIdentity | nullUserIdentityrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Personal profile information for a user including name, avatar, and locale preferences. Stored separately from authentication data for GDPR compliance.
credentialsarrayrequired
Nested fields truncated. Expand to continue inline, or use the model link.
linksobjectrequired
selfstringrequired
URL of the current page
nextstring
URL of the next page
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/applications/{application_id}/users

Create a new user within an application. Used for backend provisioning of users without self-registration. More Applications

Body application/json
avatar_urlstring · uri
external_idstring
status
given_namestring
family_namestring
display_namestring
preferred_languagestring
localestring
timezonestring
preferred_account_idstring | null
Unique identifier for an account.
Responses
200application/json
OK
schemaobject
dataUserrequired
A user within an application who can authenticate and access resources. Users belong to an Application and access Accounts via memberships.
idstringrequired
Unique identifier for a user.
application_idstringrequired
Unique identifier for an application.
statusrequired
linksobjectrequired
selfstringrequired
URL of the created resource
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/applications/{application_id}/users/search

Search users under an application using Lucene syntax. More

Body application/json
querystringrequired
Lucene-style search query. Supports field:value syntax (id:, status:, external_id:, given_name:, family_name:, display_name:), wildcards (*), and boolean operators (AND, OR).
limitinteger
offsetinteger
sort
Responses
200application/json
OK
schemaobject
dataarrayrequired
itemobjectrequired
idstringrequired
Unique identifier for a user.
application_idstringrequired
Unique identifier for an application.
statusrequired
identityUserIdentity | nullUserIdentityrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Personal profile information for a user including name, avatar, and locale preferences. Stored separately from authentication data for GDPR compliance.
credentialsarrayrequired
Nested fields truncated. Expand to continue inline, or use the model link.
metaobjectrequired
querystringrequired
totalnumberrequired
limitnumberrequired
offsetnumberrequired
sortrequired
linksobjectrequired
selfstringrequired
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring

Models

Account
idstringrequired
Unique identifier for an account.
parent_idstring | nullrequired
Parent resource ID (application ID for accounts).
Variant
Unique identifier for an account.
Option 1string
Unique identifier for an account.
Unique identifier for an application.
Option 2string
Unique identifier for an application.
namestring | null
Display name for the account.
avatar_urlstring · uri | null
URL to the account's avatar image.
Client
idstringrequired
Unique identifier for a client application.
resource_idstringrequired
Variant
Unique identifier for an account.
Option 1string
Unique identifier for an account.
Unique identifier for an application.
Option 2string
Unique identifier for an application.
hostnamestring | nullrequired
Optional hostname that maps requests to this client when client_id is omitted.
issuerstringrequired
audiencestringrequired
allowed_originsarrayrequired
itemstringrequired
allowed_scopestring | nullrequired
default_scopestringrequired
redirect_urisarrayrequired
itemstringrequired
seamless_sign_inbooleanrequired
login_enabledbooleanrequired
register_enabledbooleanrequired
csrf_requiredbooleanrequired
email_provider_configobject | nullrequired
providerrequired
mock_inbox_idstringrequired
access_token_configobject | nullrequired
Configuration for access tokens issued by this client. Access tokens are short-lived and authorize API requests on behalf of the user.
expires_innumber
cookie_optionsobject
namestringrequired
http_onlyboolean
secureboolean
same_site
max_ageintegerrequired
pathstring
refresh_token_configobject | nullrequired
Configuration for refresh tokens issued by this client. Refresh tokens are long-lived and allow obtaining new access tokens without re-authentication.
expires_innumber
cookie_optionsobject
namestringrequired
http_onlyboolean
secureboolean
same_site
max_ageintegerrequired
pathstring
id_token_configobject | nullrequired
Configuration for ID tokens issued by this client. ID tokens are JWTs containing user claims like email and name for client-side personalization.
expires_innumber
cookie_optionsobject
namestringrequired
http_onlyboolean
secureboolean
same_site
max_ageintegerrequired
pathstring
external_jwks_configobject | nullrequired
jwks_urlstring
public_keysarray
itemstringrequired
saml_configobject | nullrequired
saml_metadata_urlstring
public_keysarray
itemstringrequired
expected_issuerstring
rate_limit_configobject | nullrequired
Configuration for rate limiting client requests. Higher limits may be useful for testing environments.
login_maxinteger
auth_maxinteger
unauth_maxinteger
EmailAddress
string · email
A valid, normalized email address.
EmailCredential
idstringrequired
user_idstringrequired
Unique identifier for a user.
emailEmailAddress | nullEmailAddress
A valid, normalized email address.
hashed_emailstring | null
email_verified_atstring | null
FileMultipartAbortResponse
upload_idstringrequired
keystringrequired
Membership
idstringrequired
Unique identifier for a membership.
account_idstringrequired
Unique identifier for an account.
user_idstringrequired
Unique identifier for a user.
rolerequired
Payment
idstringrequired
Unique identifier for a payment.
account_idstringrequired
Unique identifier for an account.
amount_centsnumberrequired
currencystringrequired
statusrequired
paid_atstring | nullrequired
payment_methodstring | nullrequired
external_idstring | nullrequired
external_customer_idstring | nullrequired
external_datarequired
ProblemDetails
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
S3FileMetadata
keystringrequired
pathstringrequired
size_bytesnumberrequired
etagstring | nullrequired
last_modifiedstring · date-timerequired
storage_classstring | nullrequired
S3FileMultipartCompleteResponse
upload_idstringrequired
keystringrequired
etagstring
locationstring
S3FileMultipartInitResponse
upload_idstringrequired
keystringrequired
S3FilePresignResponse
urlstring · urirequired
headersobject
expires_atstring · date-timerequired
User
idstringrequired
Unique identifier for a user.
application_idstringrequired
Unique identifier for an application.
statusrequired
UserIdentity
idstringrequired
Unique identifier for a user.
avatar_urlstring · uri | null
external_idstring | null
given_namestring | null
family_namestring | null
display_namestring | null
preferred_languagestring | null
localestring | null
timezonestring | null
ValidationProblemDetails
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring