Client OS API
Caller and members
Who is calling, the members of your organizations, and changing an Org member’s Role.
/api/me returns the caller resolved from the Supabase Auth JWT or PAT. The member routes need org:admin, and every role change writes an Audit event.
Operations
| Request | What it does |
|---|---|
| GET /api/me | The caller: id, email and roles |
| GET /api/users | List the members of your organizations (org:admin) |
| PATCH /api/users/{id}/role | Change an Org member’s Role, recorded as an Audit event (org:admin) |
Methods and paths come from packages/api-client/openapi.json, which CI regenerates from the route definitions; this site builds its lists from that file. Every /api operation needs a Supabase Auth JWT or a PAT and is rate limited. /health and /health/deep are plain routes outside the spec.