TraderMemos
API Reference

Admin

GET/api/v1/admin/users

Owner-only; anyone else gets 403.

Authorization

bearerAuth
AuthorizationBearer <token>

Session JWT access token or personal access token (tm_pat_…).

In: header

Response Body

curl -X GET "https://example.com/api/v1/admin/users"
Empty
POST/api/v1/admin/users

Bypasses the registration gate — an owner inviting someone is not open sign-up.

Authorization

bearerAuth
AuthorizationBearer <token>

Session JWT access token or personal access token (tm_pat_…).

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

curl -X POST "https://example.com/api/v1/admin/users" \  -H "Content-Type: application/json" \  -d '{    "email": "string",    "password": "stringstri"  }'
Empty
PATCH/api/v1/admin/users/{id}

Authorization

bearerAuth
AuthorizationBearer <token>

Session JWT access token or personal access token (tm_pat_…).

In: header

Path Parameters

id*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

curl -X PATCH "https://example.com/api/v1/admin/users/string" \  -H "Content-Type: application/json" \  -d '{    "is_admin": true  }'
Empty
DELETE/api/v1/admin/users/{id}

Cascades every account, trade, note and attachment they own. No undo.

Authorization

bearerAuth
AuthorizationBearer <token>

Session JWT access token or personal access token (tm_pat_…).

In: header

Path Parameters

id*string

Response Body

curl -X DELETE "https://example.com/api/v1/admin/users/string"
Empty
POST/api/v1/admin/users/{id}/password

No current password — the point is that the user does not have it. Invalidates their refresh tokens.

Authorization

bearerAuth
AuthorizationBearer <token>

Session JWT access token or personal access token (tm_pat_…).

In: header

Path Parameters

id*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

curl -X POST "https://example.com/api/v1/admin/users/string/password" \  -H "Content-Type: application/json" \  -d '{    "new_password": "stringstri"  }'
Empty