Platform Management API

Create

Create a USER-LEVEL, MCP-ONLY API token for the external MCP server (POST /api/mcp/wemasy). Two deliberate properties: - project_id stays NULL -> NOT locked to one project, so the agent can target ANY of the user's projects per call (multi-project). A project-scoped token would be hard-locked by AddProjectToRequestMiddleware and cannot switch. - abilities = ['mcp'] -> rejected on the rest of the API by AddProjectToRequestMiddleware (mcp ability but not '*'), so a leaked MCP token is useless outside the MCP endpoint. Least privilege. Gated by the per-user `mcp_enabled` flag (User::canUseMcp). The plaintext token is returned ONCE.

List

List the current user's MCP tokens (user-level, `mcp` ability). NOT gated by canUseMcp so a user can still see + revoke existing tokens after the flag is turned off. Project-scoped tokens and full-access (`*`) tokens are excluded.

Revoke

Revoke one of the current user's MCP tokens. Scoped to the user + verified to be an MCP token (user-level + `mcp` ability) so it can't touch other tokens.

Create API Token

List API Tokens

Revoke API Token

List Sessions This includes browser sessions, API tokens, etc

Revoke Session

Revoke All Sessions This will log out the user from all devices and revoke all API tokens

List Audit Logs

Login

Authenticate Login

Create Account

Verify Email OTP

Rate limit: 5 attempts per email address and 10 attempts per IP address per 30 minutes.

Resend Email OTP

Rate limit: 5 requests per 30 minutes.

Send Verification Email

Rate limit: 5 requests per 30 minutes.

Confirm Email

Forgot Password

Reset Password

Setup Password (admin-invited account first login)

Email me a login link

Always answers "if the address exists, a link is on its way", whether the account exists or not.

Send me a new link

From the page of an expired or used link: a new link to the account of that link (never another address). Same answer as `request`.

Open a login link

New email code

Verify the security step and log in

Get Policy

Logout

Send Verification Email

Rate limit: 5 requests per 30 minutes.

Create Security Email Code

Validate Two Factor Auth

Security Verification

Verify Two Factor Code

Update Security Authenticator

Generate Recovery Codes

Save Recovery Codes

Get Billing Summary

Get billing summary for projects owned by the authenticated user Returns aggregated data and only expired/near-expired/failed subscriptions

Calculate Checkout Tax

Calculate VAT for the current checkout state. Validates ONLY the inputs the tax calculation actually consumes (country, contact_type, vat_number, subtotal) plus the VIES VAT check when a company supplies a number. Other contact fields (name, address, phone, etc.) are intentionally NOT validated here — they don't influence the tax rate, and validating them mid-edit blocks the tax line from rendering while the user is still filling the form. Full field validation runs at the final `/domain-upgrade/checkout` POST.

List Invoices

Send the code to the account email

Check the code; on success the account email is verified

Community Usage

Posts this month, published listings and members, each with the plan's limit (and extra packs).

Visitor Accounts Status

Whether visitors of this project's site can sign up and log in.

Community Members

The site's visitor accounts with their community roles, and the role requests that wait.

Approve A Role Request

Reject A Role Request

Give A Community Role

The owner makes a verified visitor account a moderator, business or organisation.

Take A Community Role Away

Turn On Visitor Accounts

Visitors of the site can sign up (with email verification first) and log in: the account pages are added, nothing of the shop. No mail goes out from this.

Store Feedback Delegates to the unified support ticket system using the "feedback" channel

Rate limit: 20 requests per user per 5 minutes.

List Feedbacks Backward-compatible endpoint — queries support_tickets filtered by the "feedback" channel and maps the response to match the original PlatformFeedback shape

Feedback pop-up settings Whether the reward line is on (the promotion switch) and whether this account already got a reward

Send feedback One answer of the one-screen pop-up: the owner's own words. The ticket uses the logged-in account. Rate limit: 5 per user per hour

List Countries

List States

Check an authorization request for the consent screen

Returns what the owner is asked to approve: the app name, where it will be sent back to, the owner's projects with the scopes each allows, and a signed consent token that binds the later approval to exactly these checked parameters.

Approve: one project, one scope

Returns the redirect_to URL (the registered redirect URI plus a one-time code).

Deny: sends the client back with error=access_denied

The AI apps this account has connected (OAuth), for the settings screen

List Notifications

Get Notification

Mark Notifications as Read

Mark Notification as Unread

Archive Notifications

Delete Notifications

List Archived Notifications

Unarchive Notifications

Apply as a partner (or see the existing application)

The signed-in account's own partner record, or null

The partner dashboard (a first page in slice 1; clients and earnings follow)

Platform info

The QR codes for the tables (print sheet). Only with the QR menu module on

Validate Invitation

Join Invitation

Check Project Tool Access

Get all projects

Search projects (project switcher)

Small, fast list for the project switcher (Cmd/Ctrl+K): the projects the signed-in user may open, filtered by title, domain or id. Same access rule as projects/all, but at most `limit` rows and only the fields the switcher shows, so it stays fast for an account with thousands of projects. Without a query it returns `recent_ids` first (the projects this browser opened last), then the most recently changed ones.

Update User Permission

Invite User to Project

Resend Project Invitation

Delete Project Invitation

Get Project Users

Remove Project User

Permissions

Get mail server settings

The password is never returned, only whether one is stored.

Send a test email through an SMTP server

Sends a short test email to `test_to` through the given settings. Leave `password` empty to use the stored password (only for the same host and username). On success these exact settings can be saved for 30 minutes.

Save mail server settings

`mode=wemasy` goes back to WEMASY's mail server and removes the stored settings. `mode=custom` saves the project's own server; it must have passed a test with exactly these settings, unless only `use_forms` or `use_newsletter` changed.

MCP status of the project

Whether MCP is on, whether this account may switch it on (owner on a paid plan for write), the project's MCP tokens and the limits every call has.

Switch MCP on or off for the project

On needs the project owner (any plan). Off stops every token of the project at once and revokes them.

Create an MCP token for the project

Returns the token once. `scope` read: only tools that read; write: every tool, changes still ask for a confirm round.

Revoke an MCP token of the project

Get the email style

`saved`: whether the project's mails use it. `values`: what the form edits (the site's logo and colour as a start when nothing is saved).

Save the email style

From now on every mail of the project uses it. Empty fields fall back: the brand colour to the site's, the button to the brand colour.

Remove the email style: the project's mails get the standard look again

Preview a style

A sample mail (as a booking confirmation looks) and a sample newsletter with these values, not saved. HTML documents for an iframe.

Send a test mail

A sample mail in the saved style to the signed-in owner, through the same frame as the project's other mails.

Get Project

Create a new project

Builds the Stripe session on the SPA handoff page for the project that create already made (after the billing contact is filled in)

Update Project

Remember Last Visited Project

Persists the user's last visited project so fresh logins and legacy un-prefixed URLs resolve to a sensible default. NOT the source of truth for the active project — the URL path is.

Transfer Project Ownership

Update Theme Status

Update Website Availability Status

POST /api/services/platforms/v1/projects/update-website-status Sets a project's public availability to live / maintenance / offline. Stored in projects_meta (`website_disabled`, `maintenance_mode`); the generator reads these on the next deploy to serve a blank page (offline) or a maintenance page instead of the real site. The states are mutually exclusive, and it's fully reversible — set back to `live` and re-deploy to restore the normal site. This only persists the flag; the SPA triggers a redeploy afterwards so the change goes live.

Stripe checkout for one usage add-on (task 0045 part 3). Called when the owner clicks confirm in the add-on popup; nothing is charged before that and nothing counts before the payment confirms (webhook)

"Send later": queued, sent by mail:release-held while today's room allows

Ask for a higher daily limit: the number and why; WEMASY reviews the request

List the project's connections

`summary.attention`: accounts that need the owner (expiring, expired, failing, or a page or location still to choose). `tools`: where the owner can connect more accounts.

Get the outside websites of the project

Save the outside websites of the project

Get the business profile

`saved`: whether the project has the file. Until then `profile` is a first version from the facts the project had (`from_existing` says where each came from; `hints` holds what could not be filled in).

Save the business profile

Writes business/profile.json (one commit, none when nothing changed). The website shows it after the next publish; the AI uses it at once.

Preview what changes where

For the profile in the form (not saved): the facts that change on the website, its JSON-LD organization node, what each connected Google Business Profile location has now and what a push would do per field, and the AI's view of the facts. `problems`: what is not valid yet.

Send the profile to Google Business Profile

The saved profile to one connected location: `fields` (name, phone, description, hours, special_hours), default every field that differs. Never an empty value.

Send the logo and cover photo to Google Business Profile

The saved profile's media.logo and media.cover (https pictures) to one connected location through Google's media API: `kinds` (logo, cover), default every one that differs. A picture is checked first (JPG or PNG, 10 KB to 5 MB, a minimum size) and the location's media is read back to confirm it arrived. Never an empty picture; an unchanged one is skipped.

Send the description and banner to the YouTube channel

The saved profile's description (at most 1000 characters) and cover picture (the banner: JPG or PNG, 16:9, at least 2048x1152, at most 6 MB) to one connected channel: `fields` (description, banner), default each that differs; a description changed on YouTube is not overwritten unless asked for. Editing a channel needs the youtube.force-ssl permission: an account that has not given it answers 409 `scope_missing` (reconnect). The channel is read back to confirm (`verified`).

Send the about text, description and cover to the Facebook Page

The saved profile's short text (About, at most 255 characters), long text (Description) and cover picture (JPG or PNG, at least 400x150) to one connected Page: `fields` (about, description, cover), default each that differs; a text changed on Facebook is not overwritten unless asked for. Editing a Page needs pages_manage_metadata (Meta App Review): a Page that has not given it answers 409 `scope_missing` (reconnect). The Page is read back to confirm (`verified`). The Page's profile picture cannot be changed through the API.

The setup page found no token and could not get one (31 Oct, users 4206 and 4268: the signup page reported goto_setup and nothing followed), or the visitor left / hid the tab / waited more than 8 s before the setup page started (user 4370; sent by the signup page with navigator.sendBeacon). Public, because without a token nothing else can speak. With a code the journey of the user it was issued to gets signup.setup_bounced (the code is left alone: a redeem that never reached us is still valid). Without a code there is nobody to name, so it is a log line and a daily counter

Save Smart Filter

Get Smart Filter

Delete Smart Filter

List Subscriptions

Verify Subscription

POST /api/services/platforms/v1/subscriptions/verify

Cancel Subscription

Upgrade Trial

Used when: - User on active trial wants to pay early - Trial expired and user wants to reactivate with payment

Resume Subscription

Subscribe to Tool

Subscribe to a new tool for existing project. Supports BOTH trial and paid flows: - trial=true: Create trial subscription immediately (if eligible) - trial=false: Create paid subscription with Stripe checkout

Request a refund

Rate limit: 5 requests per user per 10 minutes — prevents accidental double-submits from impatient button-clickers and rules out abuse loops.

List my refund requests

Cancel my refund request

Domain Upgrade Checkout

List Support Channels

Create Support Ticket

Rate limit: 10 requests per user per 5 minutes.

List Support Tickets

List My Support Tickets

Get Support Ticket Detail

Reply to Support Ticket

Download a ticket attachment (the ticket's owner or WEMASY support)

Update Support Ticket

Get User

Accept Policy

Update User Details

Send Update Email Token

Rate limit: 5 attempts per email address and 5 attempts per IP address per 60 minutes.

Verify Update Email

Update Password

Update Language

Update Timezone

Update Editor Settings

Update Editor Mode

Saves the user's editor mode preference to user metadata

Update Sidebar Layout Mode

Saves the user's sidebar layout mode preference to user metadata

Update Designer Workspace Mode

Saves whether the sitebuilder shell shows Manual designer tools or the inline AI workspace. Same user-meta pattern as sidebar_layout_mode / editor_mode so refresh and new tabs restore the last choice.

Dismiss Widget Teaser

WhatsApp follow-up consent: read

Whether the signed-in user agreed to get their website link and tips on WhatsApp, on which number, and which consent text version they saw.

WhatsApp follow-up consent: give or withdraw

`opt_in: true` needs the user's own WhatsApp number (country code first). `opt_in: false` withdraws. Every change is kept as a consent record.

Hide or show a product hero

Remembers, per user and on every device, which product pages show their hero small (title and buttons only). Same user-meta pattern as sidebar_layout_mode; user/get returns the list as `dismissed_heroes`.

Register a mobile push device token for the authenticated user

Prefer auto-registration via PushDeviceTokenMiddleware (cookie or X-Wemasy-Device-* headers). This endpoint is the explicit fallback used by the native shells after APNs/FCM token is available.

List Workspaces

Returns all workspaces the authenticated user owns within the current platform, with a project count per workspace.

Create Workspace

Update Workspace

Delete Workspace

Soft-deletes the workspace and unassigns all its projects (sets projects.workspace_id = NULL). Projects are NEVER deleted.

Assign Projects to Workspace

Bulk-move projects into a workspace, or unassign them by passing workspace_id = null.

Enqueue Workspace Publish

Add projects to the durable workspace publish queue. Processing continues on the server (max 2 concurrent per workspace) even if the browser closes.

Workspace Publish Queue Status

Returns durable queue rows for a workspace (pending / running / recent terminal). Safe to poll after refresh — the queue is not browser-local.

Cancel Workspace Publish Queue Item

Removes a pending site from the queue, or cancels an in-flight deploy that this queue started.