The Admin API exposes 55 generated operations. Every request uses a Management Key; only operations whose contract declares Idempotency-Key require it.
Workspaces
- Archive a workspace —
DELETE /admin/v1/workspaces/{workspaceId} - Create a workspace —
POST /admin/v1/workspaces - Get a workspace —
GET /admin/v1/workspaces/{workspaceId} - List workspaces visible to the current management principal —
GET /admin/v1/workspaces - Update a workspace —
PATCH /admin/v1/workspaces/{workspaceId}
Provider Connections
- Archive a provider connection —
DELETE /admin/v1/provider-connections/{providerConnectionId} - Connect an upstream provider and encrypted API key —
POST /admin/v1/workspaces/{workspaceId}/provider-connections - Get a provider connection without secret plaintext —
GET /admin/v1/provider-connections/{providerConnectionId} - List provider connections —
GET /admin/v1/workspaces/{workspaceId}/provider-connections - Rotate a provider API key —
POST /admin/v1/provider-connections/{providerConnectionId}/rotate-secret - Test provider connectivity and credentials before saving —
POST /admin/v1/workspaces/{workspaceId}/provider-connections/test - Update a provider connection —
PATCH /admin/v1/provider-connections/{providerConnectionId} - Verify provider connectivity and credentials —
POST /admin/v1/provider-connections/{providerConnectionId}/verify
Plans and Strategies
- Bind a strategy version to a plan from an effective time —
POST /admin/v1/plans/{planId}/strategy-bindings - Close a strategy binding at the requested effective time —
DELETE /admin/v1/plan-strategy-bindings/{bindingId} - Create a workspace plan —
POST /admin/v1/workspaces/{workspaceId}/plans - Create a versioned quota strategy —
POST /admin/v1/workspaces/{workspaceId}/plan-strategies/quota - Get a workspace plan and active strategy bindings —
GET /admin/v1/plans/{planId} - Get a strategy version —
GET /admin/v1/plan-strategies/{strategyId} - List workspace plans —
GET /admin/v1/workspaces/{workspaceId}/plans - List plan strategies owned by a workspace —
GET /admin/v1/workspaces/{workspaceId}/plan-strategies - List current and historical strategy bindings —
GET /admin/v1/plans/{planId}/strategy-bindings - Publish a plan after strategy validation —
POST /admin/v1/plans/{planId}/publish - Publish an immutable strategy version —
POST /admin/v1/plan-strategies/{strategyId}/publish - Update a draft workspace plan —
PATCH /admin/v1/plans/{planId}
Users and Access
- Activate a workspace access —
POST /admin/v1/workspace-accesses/{accessId}/activate - Change the plan bound to an access —
PATCH /admin/v1/workspace-accesses/{accessId}/plan - Get a workspace access —
GET /admin/v1/workspace-accesses/{accessId} - List users with data-plane access to a workspace —
GET /admin/v1/workspaces/{workspaceId}/users - Idempotently provision a Better Auth user and workspace access —
POST /admin/v1/workspaces/{workspaceId}/users - Renew access and create the next quota period from active plan strategies —
POST /admin/v1/workspace-accesses/{accessId}/renew - Suspend new data-plane calls —
POST /admin/v1/workspace-accesses/{accessId}/suspend
Inference Keys
- Issue a Better Auth inference key; plaintext is returned once —
POST /admin/v1/workspace-accesses/{accessId}/api-keys - List inference keys without plaintext —
GET /admin/v1/workspace-accesses/{accessId}/api-keys - Revoke an inference key without changing plan or quota —
DELETE /admin/v1/workspace-accesses/{accessId}/api-keys/{keyId}
Quota
- Get the current quota snapshot —
GET /admin/v1/workspace-accesses/{accessId}/quota
Usage and Audit
- Get an invocation, provider attempt and quota settlement —
GET /admin/v1/invocations/{invocationId} - List control-plane audit logs —
GET /admin/v1/workspaces/{workspaceId}/audit-logs - List model invocations —
GET /admin/v1/workspaces/{workspaceId}/invocations - List immutable usage and adjustment events —
GET /admin/v1/workspaces/{workspaceId}/usage-events
Billing
- Store or rotate a billing provider credential —
PUT /admin/v1/billing-connections/{connectionId}/provider-credential - Store or rotate a billing webhook signing secret —
PUT /admin/v1/billing-connections/{connectionId}/webhook-secret - Create a Stripe, Creem or app-sync connection —
POST /admin/v1/workspaces/{workspaceId}/billing-connections - Map an external Product/Price to a workspace plan —
POST /admin/v1/billing-connections/{connectionId}/product-mappings - Create a provider-neutral hosted subscription Checkout —
POST /admin/v1/workspace-accesses/{accessId}/billing-checkouts - Disable a product mapping —
DELETE /admin/v1/billing-product-mappings/{mappingId} - Disable a billing connection —
DELETE /admin/v1/billing-connections/{connectionId} - List billing connections —
GET /admin/v1/workspaces/{workspaceId}/billing-connections - List product mappings —
GET /admin/v1/billing-connections/{connectionId}/product-mappings - List webhook inbox events —
GET /admin/v1/billing-connections/{connectionId}/webhook-events - List external subscription projections —
GET /admin/v1/workspace-accesses/{accessId}/external-subscriptions - Start external subscription reconciliation —
POST /admin/v1/billing-connections/{connectionId}/reconcile - Replay a failed webhook inbox event —
POST /admin/v1/webhook-events/{eventId}/replay - Idempotently synchronize an external billing period —
POST /admin/v1/workspace-accesses/{accessId}/billing-periods/sync - Verify billing provider credentials —
POST /admin/v1/billing-connections/{connectionId}/verify