Management API Specification
Servers
List the vendors the user can administrate
Get the vendors the authenticated user has publisher permissions for, based on their organization memberships.
Authorizations
Responses
The vendors the user has publisher permissions for
POST /management/vendors
GET /management/bills
Authorizations
Parameters
Query Parameters
"DRAFT""PENDING""PAID""RETRYING""OVERDUE""CANCELED""EXPIRED""DELETED""VOIDED"Responses
Retrieve the users bills
GET /management/bills/{id}
Authorizations
Parameters
Path Parameters
"1d78271264b9c76d5842911dd70b4353"Responses
Retrieve the users bills
GET /management/contracts
Authorizations
Parameters
Query Parameters
Responses
Retrieve the users contracts
GET /management/contracts/{id}
Authorizations
Parameters
Path Parameters
"1d78271264b9c76d5842911dd70b4353"Responses
Retrieve the users contracts
GET /management/contracts/{id}/licenses
Authorizations
Parameters
Path Parameters
"1d78271264b9c76d5842911dd70b4353"Responses
Retrieve users with license entitlements for the contract
List upgrade options
Lists the products and purchase options each item of the contract can be upgraded, downgraded, or switched to. Returns 400 when the contract cannot be changed (inactive or non-recurring).
Authorizations
Parameters
Path Parameters
"1d78271264b9c76d5842911dd70b4353"Responses
The available upgrade and downgrade paths for the contract
GET /management/transactions
Authorizations
Parameters
Query Parameters
Responses
A list of transactions
GET /management/products
Authorizations
Parameters
Query Parameters
Responses
Retrieve a list of products
POST /management/products
Authorizations
Request Body
Responses
A created product
GET /management/products/{sku}
Authorizations
Parameters
Path Parameters
Responses
Retrieve a a product by SKU
PATCH /management/products/{sku}
Authorizations
Parameters
Path Parameters
Request Body
Responses
The updated product
GET /management/products/{sku}/fulfillments
Authorizations
Parameters
Path Parameters
Responses
Retrieve a a product by SKU
Users
Operations
List users
Returns a list of users with optional filtering.
Authorizations
Parameters
Query Parameters
"john""10""0"Responses
A list of users matching the query parameters
Create a user
Creates a new user with the specified email and optional name.
Authorizations
Request Body
Responses
User created successfully
Get a user by ID
Retrieves a specific user's profile by their ID.
Authorizations
Parameters
Path Parameters
The unique identifier of the user
"user123"Responses
The requested user profile
Delete a user
Deletes a user from the auth server. This action is irreversible.
Authorizations
Parameters
Path Parameters
The unique identifier of the user
"user123"Responses
User deleted successfully
Update a user
Updates a specific user's profile with the provided data.
Authorizations
Parameters
Path Parameters
The unique identifier of the user
"user123"Request Body
Responses
The updated user profile
Change user login identifier
Changes the email address that a user uses to log in.
Authorizations
Parameters
Path Parameters
The unique identifier of the user
"user123"Request Body
Responses
Login identifier changed successfully
Add phone login identifier
Creates a new SMS user in Auth0 and links it as an additional login identity to the existing user.
Authorizations
Parameters
Path Parameters
The unique identifier of the user
"user123"Request Body
Responses
Phone identifier added successfully
Set user metadata value
Sets a metadata value for a specific user with the specified key.
Authorizations
Parameters
Path Parameters
The unique identifier of the user
"user123"The key of the metadata entry
"preferences"Request Body
Responses
Metadata value set successfully
Delete user metadata value
Deletes a metadata value for a specific user with the specified key.
Authorizations
Parameters
Path Parameters
The unique identifier of the user
"user123"The key of the metadata entry
"preferences"Responses
Metadata value deleted successfully
Set user password
Sets or updates the password for a user. Creates a password authentication method if one does not exist.
Authorizations
Parameters
Path Parameters
The unique identifier of the user
"user123"Request Body
Responses
Password set successfully
List team members
Returns the list of users with portal access for the current vendor.
Authorizations
Responses
A list of team members
Invite a team member
Adds a new team member identified by email and assigns one or more portal roles.
Authorizations
Request Body
Responses
Team member added successfully
Set team member roles
Replaces the portal roles for a team member. Only portal-managed roles are affected; other roles on the user are left untouched. Pass an empty array to remove all portal roles.
Authorizations
Parameters
Path Parameters
"auth0|61715b8ebe82f0006ab0613b"Request Body
Responses
Roles updated successfully
Remove a team member
Removes all portal-managed role assignments for a user. Other roles on the user are left untouched.
Authorizations
Parameters
Path Parameters
"auth0|61715b8ebe82f0006ab0613b"Responses
Team member removed
Get customer information
Returns customer information in XML format for Mediaconnect compatibility.
Authorizations
Parameters
Path Parameters
The unique identifier of the customer
"958280"Responses
Customer information in XML format
GET /management/entitlements
Authorizations
Parameters
Query Parameters
"premium article""20""cursor123""user123""article""audiobook""ebook""bundle""podcast""pass""publication""physical_issue""article""premium-article-123"Responses
List of entitlements
Get a checkout by id
Fetches a single checkout belonging to the caller's vendor. Primarily used to hydrate a checkout.1#confirm webhook event, which carries only a checkoutId.
Authorizations
Parameters
Path Parameters
The unique identifier of the checkout
"checkout123"Responses
The checkout
List paywalls
Lists all paywalls configured for the authenticated vendor.
Authorizations
Responses
The list of paywalls for the vendor
Get paywall by ID
Retrieves the paywall configuration and settings for the specified paywall ID.
Authorizations
Parameters
Path Parameters
"pw123456"Responses
The paywall information and configuration
GET /management/access-lists
Authorizations
Responses
Retrieve a list of access lists
POST /management/access-lists
Authorizations
Request Body
Responses
Access list created successfully
GET /management/access-lists/{id}
Authorizations
Parameters
Path Parameters
"src_123abc"Responses
Retrieve an access list by ID
PUT /management/access-lists/{id}
Authorizations
Parameters
Path Parameters
"src_123abc"Request Body
Responses
Access list updated successfully
PATCH /management/access-lists/{id}
Authorizations
Parameters
Path Parameters
"src_123abc"Request Body
Responses
Access list patched successfully
GET /management/access-lists/{id}/grants
Authorizations
Parameters
Path Parameters
"src_123abc"Responses
Retrieve a list of grants for an access list
POST /management/access-lists/{id}/grants
Authorizations
Parameters
Path Parameters
"src_123abc"Request Body
Responses
Grant created successfully
GET /management/access-lists/{id}/grants/{grantId}
Authorizations
Parameters
Path Parameters
"src_123abc""purchase_123abc"Responses
Retrieve a grant by ID
PUT /management/access-lists/{id}/grants/{grantId}
Authorizations
Parameters
Path Parameters
"src_123abc""purchase_123abc"Request Body
Responses
Grant updated successfully
DELETE /management/access-lists/{id}/grants/{grantId}
Authorizations
Parameters
Path Parameters
"src_123abc""purchase_123abc"Responses
Grant deleted successfully
List all sites for the calling vendor
Returns every site with per-capability status. Each upstream is read once per vendor, so a vendor with 200 sites costs the same round-trips as one with a single site. A failing upstream degrades only its own capability to failed rather than failing the whole response.
Authorizations
Responses
All sites registered under this vendor
Get a single site
Authorizations
Parameters
Path Parameters
"alingsasnytt.se"Responses
The site, with resolved content selectors and capsule config
Provision or update a site
Every block is optional and provisioning is strictly opt-in per capability — omitted blocks are left untouched. Legs run least-live-first (client → content → login domain → scrape origin) and each is attempted independently, so one failure does not abandon the rest. Returns 207 when some legs succeeded and others failed; retry should target only the failed ones.
Authorizations
Parameters
Path Parameters
"alingsasnytt.se"Request Body
Responses
All requested capabilities provisioned
Get user diagnostics
Retrieve diagnostics entries for a user by their user ID or fallback ID. Returns the most recent entries.
Authorizations
Parameters
Path Parameters
"user_123"Query Parameters
"10"Responses
List of diagnostics entries
Delete user diagnostics
Delete all diagnostics entries for a user by their user ID or fallback ID.
Authorizations
Parameters
Path Parameters
"user_123"Responses
Diagnostics deleted successfully
GET /management/stats/revenue
Authorizations
Parameters
Query Parameters
"currentMrr""newMrr""churnMrr""projectedMrr""totalRevenue""totalSales""subscriptionSales""currentMrr""2026-01-01""date""2026-03-31""date"Responses
A summarised revenue metric for the vendor
Create a signed link for content access
Creates a signed token that grants access to encrypted content. Optionally appends it to a URL. Use for share links, email campaigns, gift access, or temporary tier access.
Authorizations
Request Body
Responses
The signed link/token
List trusted publisher domains for the calling vendor
Authorizations
Responses
All trusted publisher domains registered under this vendor
Get a single trusted publisher domain
Authorizations
Parameters
Path Parameters
Publisher domain (lowercase, no scheme, no trailing dot)
"example.wordpress.com"Responses
The trusted publisher domain entry
Register or update a trusted publisher domain
Upserts a trusted publisher domain entry under the calling vendor. Provide exactly one of signingKeyPem (pinned ES256) or jwksUri (HTTPS URL whose hostname matches {domain}). Idempotent: re-registration replaces the entry and advances updatedAt.
Authorizations
Parameters
Path Parameters
Publisher domain (lowercase, no scheme, no trailing dot)
"example.wordpress.com"Request Body
Responses
Domain updated
Remove a trusted publisher domain
Authorizations
Parameters
Path Parameters
Publisher domain (lowercase, no scheme, no trailing dot)
"example.wordpress.com"Responses
Domain removed (or did not exist)
Migrate a vendor's portal team members into its authhero organization
Temporary endpoint for one-off migration. Reads portal team members from the legacy backend, ensures an organization exists on the sesamy authhero tenant, and adds each member with their mapped role.
Authorizations
Request Body
Responses
Sync result