Admin
/api/v1/admin/usersOwner-only; anyone else gets 403.
Authorization
bearerAuth Session JWT access token or personal access token (tm_pat_…).
In: header
Response Body
curl -X GET "https://example.com/api/v1/admin/users"/api/v1/admin/usersBypasses the registration gate — an owner inviting someone is not open sign-up.
Authorization
bearerAuth Session JWT access token or personal access token (tm_pat_…).
In: header
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
curl -X POST "https://example.com/api/v1/admin/users" \ -H "Content-Type: application/json" \ -d '{ "email": "string", "password": "stringstri" }'/api/v1/admin/users/{id}Authorization
bearerAuth Session JWT access token or personal access token (tm_pat_…).
In: header
Path Parameters
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
curl -X PATCH "https://example.com/api/v1/admin/users/string" \ -H "Content-Type: application/json" \ -d '{ "is_admin": true }'/api/v1/admin/users/{id}Cascades every account, trade, note and attachment they own. No undo.
Authorization
bearerAuth Session JWT access token or personal access token (tm_pat_…).
In: header
Path Parameters
Response Body
curl -X DELETE "https://example.com/api/v1/admin/users/string"/api/v1/admin/users/{id}/passwordNo current password — the point is that the user does not have it. Invalidates their refresh tokens.
Authorization
bearerAuth Session JWT access token or personal access token (tm_pat_…).
In: header
Path Parameters
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
curl -X POST "https://example.com/api/v1/admin/users/string/password" \ -H "Content-Type: application/json" \ -d '{ "new_password": "stringstri" }'