Admin

Platform administration endpoints for managing users, organisations, system settings, and operational health.

Authentication

Every endpoint in this group requires the requireAdmin middleware. Requests must carry a valid JWT for a user with is_admin = true. Non-admin users receive 403 regardless of other permissions.

Audit Trail

All mutating operations write to admin_audit_log via logAdminAction(), capturing the admin's user ID, action type, target entity, request details, IP address, and user agent. The audit log is append-only and queryable via the audit log endpoint.

Pagination

List endpoints accept page (min 1, default 1) and perPage (min 1, max 100, default 20) query parameters. Responses include a meta object with page, perPage, total, and pages fields.