API Specification
Teams
Teams, membership, API tokens and the activity feed. Requires a signed-in user; API tokens are refused here.
postCreate an API token
Mints an API token for CI. The secret is returned once and stored only as a hash, so the response is unrepeatable by design.
postDelete an API token
Revokes a token. It stops working immediately.
postList activity
Reads the audit feed: who did what, to which function, when.
postList API tokens
The team's tokens and when each was last used. Never their secrets.