Management API
Organizations
Create an organization, read it and rename it.
Any signed-in user can create an organization and becomes its owner. Members read it; admins rename it or change its slug.
A caller who is not a member gets 404 for the organization and everything in it, never 403.
Operations
| Operation | Request | Who may call it |
|---|---|---|
| createOrg | POST /api/orgs | any signed-in user |
| getOrg | GET /api/orgs/{org} | viewer or above |
| updateOrg | PATCH /api/orgs/{org} | admin or above |
Management API requests carry a user token and are checked against the caller’s organization role. Delivery API requests carry an SDK key; the two never cross. Errors are always { error: { code, message } }.