Every endpoint here requires an account with founder access. Non-founders get 403 on all of them.

​
Overview

GET /v1/admin/overview → platform overview: org count, user count, usage summary, and health.

​
All workspaces

GET /v1/admin/workspaces → { "workspaces": [...] } across the whole platform.

​
All users

GET /v1/admin/users → { "users": [...] } across the whole platform.
User records returned here never include password hashes.

​
Full health

GET /v1/admin/health → detailed component health (storage, vector index, auth, rate limiter, …).

​
Manage a workspace

Founder write-actions for any workspace.

​
Workspace activity

GET /v1/admin/workspaces/{org_id}/activity → one workspace’s detail: { "org_id", "plan", "overview", "users": [...] }. 404 if the workspace is unknown.

​
Change a plan

POST /v1/admin/workspaces/{org_id}/plan
​
tier
string
required
One of the plan tiers (e.g. Starter Tier, Team Tier, Enterprise Tier).
Sets the workspace’s plan directly (a founder override, no payment). Returns the updated account view. 400 on an unknown tier.

​
Add a user

POST /v1/admin/workspaces/{org_id}/users
​
email
string
required
​
password
string
required
At least 8 characters.
​
name
string
default:"\"\""
Provisions a new account inside the workspace. Returns the created user. 400 if the email already exists or the input is invalid.

​
Probe founder status

GET /v1/admin/me — public, never raises. Returns { "is_founder": bool }. The dashboard uses it to decide whether to show admin navigation; ordinary users simply get false.