HTTP reference

API — Administration (requires admin role)

Route Handlers under src/app/api. Non-public routes expect a Supabase session cookie. Admin routes also require profiles.role = admin.

PublicCallable without a session where the handler allows it.Signed inRequires a signed-in user.AdminAdmin role on your profile.

Back to API overview

MethodsPathAccessSummary
GET/api/admin/dashboardAdminAggregate metrics for the admin home.
GET/api/admin/usersAdminSearch or list users for admin operations.
GET, PATCH/api/admin/users/[userId]AdminInspect or update a user record (role, flags, etc.).
POST/api/admin/users/[userId]/banAdminBan or suspend a user account.
POST/api/admin/users/[userId]/confirm-emailAdminAdmin-triggered email confirmation for a user.
GET/api/admin/feedbackAdminList submitted app feedback tickets.
PATCH/api/admin/feedback/[id]AdminUpdate feedback status or notes.
GET/api/admin/community/reportsAdminList community moderation reports.
PATCH/api/admin/community/reports/[reportId]AdminResolve or update a community report.
GET/api/admin/community/postsAdminAdmin listing of community posts (moderation queue).
PATCH, DELETE/api/admin/community/posts/[postId]AdminForce-edit or remove a community post.
GET, POST/api/admin/knowledge/documentsAdminList or create knowledge documents for RAG.
PATCH, DELETE/api/admin/knowledge/documents/[id]AdminUpdate metadata or delete a knowledge document.
POST/api/admin/knowledge/documents/batchAdminBatch operations on knowledge documents.
POST/api/admin/knowledge/documents/deleteAdminDedicated delete flow for knowledge documents.
GET, PATCH/api/admin/settingsAdminRead or update operator-tunable app settings.