Management API Specification
Servers
GET /management/vendors
POST /management/vendors
GET /management/bills
Authorizations
Parameters
Query Parameters
"DRAFT""PENDING""PAID""RETRYING""OVERDUE""CANCELED""EXPIRED""DELETED""VOIDED"Responses
Retrieve the users bills
GET /management/bills/{id}
Authorizations
Parameters
Path Parameters
"1d78271264b9c76d5842911dd70b4353"Responses
Retrieve the users bills
GET /management/contracts
Authorizations
Parameters
Query Parameters
Responses
Retrieve the users contracts
GET /management/contracts/{id}
Authorizations
Parameters
Path Parameters
"1d78271264b9c76d5842911dd70b4353"Responses
Retrieve the users contracts
GET /management/contracts/{id}/licenses
Authorizations
Parameters
Path Parameters
"1d78271264b9c76d5842911dd70b4353"Responses
Retrieve users with license entitlements for the contract
GET /management/transactions
Authorizations
Parameters
Query Parameters
Responses
A list of transactions
GET /management/products
Authorizations
Parameters
Query Parameters
Responses
Retrieve a list of products
POST /management/products
Authorizations
Request Body
Responses
A created product
GET /management/products/{sku}
Authorizations
Parameters
Path Parameters
Responses
Retrieve a a product by SKU
PATCH /management/products/{sku}
Authorizations
Parameters
Path Parameters
Request Body
Responses
The updated product
GET /management/products/{sku}/fulfillments
Authorizations
Parameters
Path Parameters
Responses
Retrieve a a product by SKU
Users
Operations
List users
Returns a list of users with optional filtering.
Authorizations
Parameters
Query Parameters
"john""10""0"Responses
A list of users matching the query parameters
Create a user
Creates a new user with the specified email and optional name.
Authorizations
Request Body
Responses
User created successfully
Get a user by ID
Retrieves a specific user's profile by their ID.
Authorizations
Parameters
Path Parameters
The unique identifier of the user
"user123"Responses
The requested user profile
Delete a user
Deletes a user from the auth server. This action is irreversible.
Authorizations
Parameters
Path Parameters
The unique identifier of the user
"user123"Responses
User deleted successfully
Update a user
Updates a specific user's profile with the provided data.
Authorizations
Parameters
Path Parameters
The unique identifier of the user
"user123"Request Body
Responses
The updated user profile
Change user login identifier
Changes the email address that a user uses to log in.
Authorizations
Parameters
Path Parameters
The unique identifier of the user
"user123"Request Body
Responses
Login identifier changed successfully
Add phone login identifier
Creates a new SMS user in Auth0 and links it as an additional login identity to the existing user.
Authorizations
Parameters
Path Parameters
The unique identifier of the user
"user123"Request Body
Responses
Phone identifier added successfully
Set user metadata value
Sets a metadata value for a specific user with the specified key.
Authorizations
Parameters
Path Parameters
The unique identifier of the user
"user123"The key of the metadata entry
"preferences"Request Body
Responses
Metadata value set successfully
Delete user metadata value
Deletes a metadata value for a specific user with the specified key.
Authorizations
Parameters
Path Parameters
The unique identifier of the user
"user123"The key of the metadata entry
"preferences"Responses
Metadata value deleted successfully
Set user password
Sets or updates the password for a user. Creates a password authentication method if one does not exist.
Authorizations
Parameters
Path Parameters
The unique identifier of the user
"user123"Request Body
Responses
Password set successfully
List team members
Returns the list of users with portal access for the current vendor.
Authorizations
Responses
A list of team members
Invite a team member
Adds a new team member identified by email and assigns one or more portal roles.
Authorizations
Request Body
Responses
Team member added successfully
Set team member roles
Replaces the portal roles for a team member. Only portal-managed roles are affected; other roles on the user are left untouched. Pass an empty array to remove all portal roles.
Authorizations
Parameters
Path Parameters
"auth0|61715b8ebe82f0006ab0613b"Request Body
Responses
Roles updated successfully
Remove a team member
Removes all portal-managed role assignments for a user. Other roles on the user are left untouched.
Authorizations
Parameters
Path Parameters
"auth0|61715b8ebe82f0006ab0613b"Responses
Team member removed
Get customer information
Returns customer information in XML format for Mediaconnect compatibility.
Authorizations
Parameters
Path Parameters
The unique identifier of the customer
"958280"Responses
Customer information in XML format
GET /management/entitlements
Authorizations
Parameters
Query Parameters
"premium article""20""cursor123""user123""article""audiobook""ebook""bundle""podcast""pass""publication""physical_issue""article""premium-article-123"Responses
List of entitlements
List paywalls
Lists all paywalls configured for the authenticated vendor.
Authorizations
Responses
The list of paywalls for the vendor
Get paywall by ID
Retrieves the paywall configuration and settings for the specified paywall ID.
Authorizations
Parameters
Path Parameters
"pw123456"Responses
The paywall information and configuration
GET /management/access-lists
Authorizations
Responses
Retrieve a list of access lists
POST /management/access-lists
Authorizations
Request Body
Responses
Access list created successfully
GET /management/access-lists/{id}
Authorizations
Parameters
Path Parameters
"src_123abc"Responses
Retrieve an access list by ID
PUT /management/access-lists/{id}
Authorizations
Parameters
Path Parameters
"src_123abc"Request Body
Responses
Access list updated successfully
PATCH /management/access-lists/{id}
Authorizations
Parameters
Path Parameters
"src_123abc"Request Body
Responses
Access list patched successfully
GET /management/access-lists/{id}/grants
Authorizations
Parameters
Path Parameters
"src_123abc"Responses
Retrieve a list of grants for an access list
POST /management/access-lists/{id}/grants
Authorizations
Parameters
Path Parameters
"src_123abc"Request Body
Responses
Grant created successfully
GET /management/access-lists/{id}/grants/{grantId}
Authorizations
Parameters
Path Parameters
"src_123abc""purchase_123abc"Responses
Retrieve a grant by ID
PUT /management/access-lists/{id}/grants/{grantId}
Authorizations
Parameters
Path Parameters
"src_123abc""purchase_123abc"Request Body
Responses
Grant updated successfully
DELETE /management/access-lists/{id}/grants/{grantId}
Authorizations
Parameters
Path Parameters
"src_123abc""purchase_123abc"Responses
Grant deleted successfully
Get user diagnostics
Retrieve diagnostics entries for a user by their user ID or fallback ID. Returns the most recent entries.
Authorizations
Parameters
Path Parameters
"user_123"Query Parameters
"10"Responses
List of diagnostics entries
Delete user diagnostics
Delete all diagnostics entries for a user by their user ID or fallback ID.
Authorizations
Parameters
Path Parameters
"user_123"Responses
Diagnostics deleted successfully
Create a signed link for content access
Creates a signed token that grants access to encrypted content. Optionally appends it to a URL. Use for share links, email campaigns, gift access, or temporary tier access.
Authorizations
Request Body
Responses
The signed link/token
List trusted publisher domains for the calling vendor
Authorizations
Responses
All trusted publisher domains registered under this vendor
Get a single trusted publisher domain
Authorizations
Parameters
Path Parameters
Publisher domain (lowercase, no scheme, no trailing dot)
"example.wordpress.com"Responses
The trusted publisher domain entry
Register or update a trusted publisher domain
Upserts a trusted publisher domain entry under the calling vendor. Provide exactly one of signingKeyPem (pinned ES256) or jwksUri (HTTPS URL whose hostname matches {domain}). Idempotent: re-registration replaces the entry and advances updatedAt.
Authorizations
Parameters
Path Parameters
Publisher domain (lowercase, no scheme, no trailing dot)
"example.wordpress.com"Request Body
Responses
Domain updated
Remove a trusted publisher domain
Authorizations
Parameters
Path Parameters
Publisher domain (lowercase, no scheme, no trailing dot)
"example.wordpress.com"Responses
Domain removed (or did not exist)
Migrate a vendor's portal team members into its authhero organization
Temporary endpoint for one-off migration. Reads portal team members from the legacy backend, ensures an organization exists on the sesamy authhero tenant, and adds each member with their mapped role.
Authorizations
Request Body
Responses
Sync result