Account And Org Management
These are authenticated direct API surfaces used by first-party account,
org-owner, and admin tools.
Current usage is mainly through user.m7.org.
/account/me/*
| Route |
What it does |
Notes |
/account/me/get |
Returns the current user profile. |
If no profile exists yet, the endpoint returns an empty-ready shape rather than hard-failing. |
/account/me/set |
Creates or updates the current user profile. |
Current writable fields include display name, avatar, bio, locale, timezone, pronouns, website, social, and settings. |
/account/me/password |
Changes the current user password. |
Requires the current password and rotates the linked id.m7 credential. |
/account/me/email/get |
Returns a specific email record or current email detail. |
Targeted email lookup within the signed-in user context. |
/account/me/email/add |
Adds an email address for the current user. |
Also requests email-confirmation delivery for new unverified addresses. |
/account/me/email/list |
Lists the current user’s email addresses. |
First-party account management helper. |
/account/me/email/delete |
Deletes an email record for the current user. |
First-party account management helper. |
/account/me/email/confirm/send |
Requests email-confirmation delivery for one owned email address. |
First-party send helper for settings/profile flows. |
/account/preferences/*
| Route |
What it does |
Notes |
/account/preferences/get |
Returns current user preferences. |
First-party UI settings helper. |
/account/preferences/set |
Updates current user preferences. |
First-party UI settings helper. |
/admin/user/*
| Route |
What it does |
Notes |
/admin/user/search |
Lists user accounts on the system. |
Root-role only. Supports status, role, search, limit, page_number, offset, cursor, and archived filters. |
/admin/user/get |
Returns one user with profile, identity, non-archived email detail, and remote id.m7 child detail when available. |
Root-role only. Accepts id or name. |
/admin/user/update_status |
Changes a user status to active, pending, or disabled. |
Root-role only. Also syncs the delegated id.m7 child status when present. |
/admin/user |
Family root for user-admin operations. |
Treat as a subtree/controller route rather than a primary business endpoint. |
/org/*
| Route |
What it does |
Notes |
/org/search |
Lists orgs owned by the current authenticated user. |
Current search supports archived filtering. |
/org/insert |
Creates a new org. |
First-party org management helper. |
/org/delete |
Deletes or archives an org. |
Lifecycle management. |
/org/restore |
Restores a previously archived org. |
Lifecycle management. |
/org/get |
Fetches one org record. |
Used by org settings and detail views. |
/org/update |
Updates one org record. |
First-party org settings helper. |
/org/identity/get |
Returns linked org identity metadata. |
Used when an org has a linked remote or delegated identity. |
/org/identity/set |
Creates, recreates, or updates linked org identity state. |
Can create or reset password-backed remote org identities. |
/org/identity |
Family root for org identity operations. |
Treat as a subtree/controller route rather than a primary business endpoint. |
/org/group/*
| Route |
What it does |
Notes |
/org/group/search |
Lists groups for an owned org. |
First-party admin helper. |
/org/group/insert |
Creates a group in an owned org. |
Requires ownership of the target org. |
/org/group/delete |
Deletes or archives a group. |
Lifecycle management. |
/org/group/restore |
Restores an archived group. |
Lifecycle management. |
/org/group/get |
Returns one group record. |
Detail view helper. |
/org/group/update |
Updates one group record. |
First-party admin helper. |
/org/client/*
| Route |
What it does |
Notes |
/org/client/search |
Lists clients for an org, optionally filtered by search terms or group membership. |
Requires ownership of the target org. |
/org/client/insert |
Creates a client in an owned org. |
First-party admin helper. |
/org/client/delete |
Deletes or archives a client. |
Lifecycle management. |
/org/client/restore |
Restores an archived client. |
Lifecycle management. |
/org/client/get |
Returns one client record. |
Detail view helper. |
/org/client/update |
Updates one client record. |
First-party admin helper. |
/org/client/password |
Changes a client password or credential secret. |
Client credential management helper. |
/org/client/group/search |
Searches client-to-group membership records. |
Separate membership surface from /org/group/*. |
/org/client/group/all |
Returns all group assignments for a client or org context. |
Membership overview helper. |
/org/client/group/add |
Adds a client to a group. |
Requires org ownership. |
/org/client/group/remove |
Removes a client from a group. |
Requires org ownership. |
/org/client/group/get |
Returns one client-group relationship. |
Membership detail helper. |
/org/client/group/set |
Replaces or updates a client-group relationship. |
Membership update helper. |
Caller Guidance
- these routes are public direct
api.user surfaces
- they are not the public OAuth entrypoints for third-party token exchange
- treat them as authenticated account, org, and admin APIs