Admin API

The Admin API manages accounts, access, and credentials at the Diafunc platform. It covers users, projects, subscriptions, and the issuance and revocation of the API tokens used to authenticate against all other APIs. It is the entry point for provisioning, access control, and operational administration.

All Admin API endpoints are served under /api/v1/admin.

The Admin API is primarily consumed by authenticated users through their browser session. Account-level operations (creating users, changing subscriptions, managing project membership) require an authenticated user with the appropriate role rather than a project-scoped API token. A subset of endpoints — notably issuing, listing, and revoking API tokens — accepts user sessions and produces the tokens that the other APIs consume.

See Authentication for the shared token and error model.

The Admin API is organized around the following resource groups:

Users and sessions — create and manage user accounts, authenticate and refresh sessions, update user profiles and preferences, and recover credentials.

Projects — list, create, update, and archive projects; manage project members and permissions; configure recent project history.

API tokens — issue, list, and revoke API tokens scoped to a project.

Subscriptions — view the current subscription plan and change the plan or extension pack.

Support — submit and track support and contact requests.

Provisioning a new integration — create a project (or use an existing one), add the required users as project members, then issue a project-scoped API token that external services can use to authenticate against the other APIs.

Rotating credentials — list the API tokens for a project, issue a new token with the same scopes, distribute it to the consuming service, then revoke the previous token.

Access review — list project members and their permissions to review who can read or write each project.