Client OS API
Service accounts
Non-human callers that belong to one Organization and authenticate with a PAT.
A Service account belongs to exactly one Organization and authenticates with a PAT. Only the ci:agent Role can be given to one; org:admin PATs are refused. The PAT is returned once at creation and stored only as a SHA-256 hash. Every route here needs org:admin.
Operations
| Request | What it does |
|---|---|
| POST /api/service-accounts | Create a ci:agent Service account; the PAT is shown once (org:admin) |
| GET /api/service-accounts | List Service accounts (org:admin) |
| DELETE /api/service-accounts/{id} | Delete a Service account (org:admin) |
Methods and paths come from packages/api-client/openapi.json, which CI regenerates from the route definitions; this site builds its lists from that file. Every /api operation needs a Supabase Auth JWT or a PAT and is rate limited. /health and /health/deep are plain routes outside the spec.