Repeak Backend API

Challenge RC + earned badges ready to claim

Claim a reward (credits RC / acknowledges a badge)

Editions in their proof window awaiting an effort

Submit an effort for a virtual edition in its proof window

GET /v2/activities

POST /v2/activities

DELETE /v2/activities/{id}

GET /v2/activities/{id}

PATCH /v2/activities/{id}

GET /v2/activities/{id}/public

POST /v2/users/{userId}/activities/{activityId}/appeal

GET /v2/users/{userId}/activities/{activityId}/review-state

GET /v2/users/{userId}/activity-appeals

Get all AI configurations

Returns all AI provider configurations for different features

Get AI configuration for a specific feature

Returns AI provider configuration for training_plan, chatbot, or plan_adjustment

Update AI configuration for a feature

Update the AI provider settings for a specific feature (training_plan, chatbot, plan_adjustment)

Get available AI providers information

Returns information about available AI providers and their capabilities

Get all user activities (admin view)

Get activity detail by ID

Set an activity validation status (operator)

List challenges (admin moderation table)

Force-close a challenge (deactivate)

Reopen a previously force-closed challenge

Get challenge update history logs

Get all challenge participations (admin view)

Get challenge participation detail with daily progress

Revoke an athlete challenge participation

Get challenge progress dashboard stats

Get user challenge summary (participations, activities, logs)

Get all declaration form templates

Retrieve all declaration form templates including deleted

Create a new declaration form template

Create a new declaration form template with HTML content and required fields. Only one template can be active at a time.

Delete a declaration form template

Soft delete a declaration form template. Cannot delete active template.

Get a declaration form template by ID

Retrieve a specific declaration form template

Update a declaration form template

Update a declaration form template. Setting isActive=true will deactivate all other templates.

Activate a declaration form template

Set a template as active. This will deactivate all other templates.

Get active declaration form template

Retrieve the currently active declaration form template

List all editions across events/organizers

Get one edition (admin detail)

Override an edition status (publish / cancel / etc.)

Edition status breakdown (dashboard tiles)

Slot-wise ticket-sales breakdown for any event (admin, cross-organizer).

Ticket-wise ticket-sales breakdown for any event (admin, cross-organizer).

List all events across organizers (admin)

Get one event (admin detail)

List registrations/bookings for an event (admin)

List participants for an event (admin roster)

Replace an event primary UUID and move all relational references

Restore a cancelled event to a public, active published listing

Revenue summary for an event (admin)

Override an event status (suspend / reinstate / cancel)

Suspend an event (blocks writes + new registrations, holds settlements)

Unsuspend an event (restores prior status, clears holds)

Event status breakdown (dashboard tiles)

Read goodie auto-award trigger config for one sponsor attachment.

Update goodie auto-award trigger config for one sponsor attachment.

List sponsor attachments with auto-award trigger config (admin master-detail).

List sponsor goodie prize contributions across every brand and both lanes (event + challenge), newest first.

Get declaration details

Get detailed information about a specific declaration

Get declaration audit logs

Get the complete audit trail for a declaration

Get declaration PDF URL

Generate a presigned URL to download the declaration PDF

Reject declaration

Reject a GST declaration with a reason. The organizer will need to restart.

Reset a declaration to the latest active template

Re-points one PENDING_VARIABLES declaration onto the current active template.

Get signed document URL

Generate a presigned URL to download the uploaded signed document

Verify declaration

Verify and approve a GST declaration. This completes the organizer onboarding.

Get all declarations

List all declarations with pagination and optional status filtering

Backfill stale template versions

Re-points PENDING_VARIABLES declarations still pinned to an old template onto the current active template. Doesn't touch declarations that already have filled variables.

Get pending declarations

List all declarations waiting for admin review with pagination

Get declaration statistics

Get summary statistics about GST declarations

List templates

Get all declaration templates with optional filtering

Create new template

Create a new declaration template (creates new version)

Delete template

Soft delete a template (cannot delete active templates)

Get template by ID

Get detailed information about a specific template

Update template

Update an existing template (creates new version)

Activate template

Activate a template (deactivates all others)

Deactivate template

Deactivate a template

Get active template

Get the currently active template used for new declarations

Get template versions

Get all versions of a template by name

GET /v2/admin/notification-categories

POST /v2/admin/notification-categories

DELETE /v2/admin/notification-categories/{id}

PATCH /v2/admin/notification-categories/{id}

GET /v2/admin/notification-journeys/{role}

PATCH /v2/admin/notification-journeys/{role}/steps/{stepId}

GET /v2/admin/notification-journeys/summary

GET /v2/admin/notification-logs

GET /v2/admin/notification-logs/{id}

Re-send a previously-FAILED dispatch log using the same step + channel + recipient + variables. Writes a NEW log row (append-only audit). PUSH channel is not supported because the push payload is not persisted on the log row.

GET /v2/admin/notification-logs/batches

GET /v2/admin/notification-logs/batches/{id}

GET /v2/admin/notification-logs/stats

GET /v2/admin/notification-mappings

POST /v2/admin/notification-mappings

DELETE /v2/admin/notification-mappings/{id}

PUT /v2/admin/notification-mappings/{id}

POST /v2/admin/notification-mappings/bulk

GET /v2/admin/notification-mappings/template-candidates

Outbox list (paginated). Body NEVER returned — only a fixed-shape preview for triage.

Manually re-drive a DEAD or FAILED outbox row. Resets attempts, clears last error, sets status=PENDING — the next processor tick picks it up. SENT and PROCESSING rows return 409.

Filter-based bulk re-drive of FAILED/DEAD outbox rows. Default dryRun=true.

Bulk re-drive a list of outbox row ids (cap 100). Returns per-id outcome — partial success is allowed.

Outbox summary: counts by status + channel, oldest-pending age, dead count, last 10 failures.

GET /v2/admin/notification-settlements

POST /v2/admin/notification-settlements/{id}/process

POST /v2/admin/notification-settlements/calculate

GET /v2/admin/notification-steps

GET /v2/admin/notification-steps/{stepId}

GET /v2/admin/notification-steps/summary

GET /v2/admin/notification-template-records

POST /v2/admin/notification-template-records

DELETE /v2/admin/notification-template-records/{id}

GET /v2/admin/notification-template-records/{id}

PUT /v2/admin/notification-template-records/{id}

GET /v2/admin/notification-templates/email

POST /v2/admin/notification-templates/email

DELETE /v2/admin/notification-templates/email/{id}

GET /v2/admin/notification-templates/email/{id}

PATCH /v2/admin/notification-templates/email/{id}

PATCH /v2/admin/notification-templates/email/{id}/pricing

GET /v2/admin/notification-templates/email/{id}/version-details

PATCH /v2/admin/notification-templates/email/{id}/visibility

POST /v2/admin/notification-templates/email/create-via-msg91

POST /v2/admin/notification-templates/email/css-inline

POST /v2/admin/notification-templates/email/sync

GET /v2/admin/notification-templates/email/validate

GET /v2/admin/notification-templates/push

POST /v2/admin/notification-templates/push

DELETE /v2/admin/notification-templates/push/{id}

GET /v2/admin/notification-templates/push/{id}

PATCH /v2/admin/notification-templates/push/{id}

POST /v2/admin/notification-templates/push/{id}/preview

PATCH /v2/admin/notification-templates/push/{id}/pricing

PATCH /v2/admin/notification-templates/push/{id}/visibility

GET /v2/admin/notification-templates/sms

POST /v2/admin/notification-templates/sms

DELETE /v2/admin/notification-templates/sms/{id}

GET /v2/admin/notification-templates/sms/{id}

PATCH /v2/admin/notification-templates/sms/{id}

POST /v2/admin/notification-templates/sms/{id}/add-version

GET /v2/admin/notification-templates/sms/{id}/mark-default

PATCH /v2/admin/notification-templates/sms/{id}/pricing

PATCH /v2/admin/notification-templates/sms/{id}/visibility

POST /v2/admin/notification-templates/sms/create-via-msg91

GET /v2/admin/notification-templates/sms/msg91-analytics

GET /v2/admin/notification-templates/sms/msg91-logs

POST /v2/admin/notification-templates/sms/sync

GET /v2/admin/notification-templates/whatsapp

POST /v2/admin/notification-templates/whatsapp

DELETE /v2/admin/notification-templates/whatsapp/{id}

GET /v2/admin/notification-templates/whatsapp/{id}

PATCH /v2/admin/notification-templates/whatsapp/{id}

PATCH /v2/admin/notification-templates/whatsapp/{id}/pricing

PATCH /v2/admin/notification-templates/whatsapp/{id}/provider-mapping

POST /v2/admin/notification-templates/whatsapp/{id}/rollback-mapping

POST /v2/admin/notification-templates/whatsapp/{id}/verify-gupshup

PATCH /v2/admin/notification-templates/whatsapp/{id}/visibility

POST /v2/admin/notification-templates/whatsapp/sync

GET /v2/admin/notification-wallets

GET /v2/admin/notification-wallets/{organizerId}

POST /v2/admin/notification-wallets/{organizerId}/adjust

GET /v2/admin/notifications/pipeline-readiness

GET /v2/admin/notifications/provider-health

POST /v2/admin/notifications/send

Get one organizer (admin detail incl. suspension)

Suspend an organizer (revokes access + active sessions)

Unsuspend an organizer (restores APPROVED status)

GET /v2/admin/promotion-templates

POST /v2/admin/promotion-templates

GET /v2/admin/promotion-templates/{id}

PATCH /v2/admin/promotion-templates/{id}

PATCH /v2/admin/promotion-templates/{id}/enabled

GET /v2/admin/system-notifications

POST /v2/admin/system-notifications

DELETE /v2/admin/system-notifications/{id}

GET /v2/admin/system-notifications/{id}

PATCH /v2/admin/system-notifications/{id}

GET /v2/admin/system-notifications/events

Get all training plans with filters

Returns a paginated list of all training plans with detailed information for admin review.

Get revenue summary

Returns detailed revenue breakdown including total revenue, paid/free plans count, and revenue by program level.

Get training plan statistics for dashboard

Returns comprehensive statistics including total plans, revenue breakdown, program level distribution, sport type distribution, and monthly trends.

Get user-wise training plan statistics

Returns a paginated list of users with their training plan statistics including total plans, revenue, and active plans.

List charities, optionally filtered by status (e.g. ?status=verified or ?status=pending).

Register a new charity. Defaults to UNVERIFIED.

Get a charity by ID.

Transition a charity to a new verification status. Only legal transitions accepted; audit-logged.

List the 8 Repeak growth loops with stage / conversion / indicator metrics and explicit sourceStatus per signal. Admin-only.

Detail view for a single growth loop. Same loop-row shape as the list endpoint. Admin-only.

Platform-wide sponsorship finance totals — collected, retained, held, settled.

The sponsorship payment ledger: brand → Repeak → payee, with the gateway leg, the settlement leg, and the frozen fee breakdown on every row.

One sponsorship in full. Release actions stay on /v2/settlements/:id — use `settlement.id` from this row.

Get a user's current verification tier (admin diagnostic).

Set a user's verification tier. Tier changes are audited and append-only.

Flip `totpRequiredAt` for another admin. Forces enrollment on their next login (or clears the forcing clock when {required:false}).

Reset another admin's TOTP enrollment (lost device / peer-enforcement). Clears their existing secret and immediately re-forces enrollment on next login. Cannot target yourself — use POST /v2/auth/totp/disable (requires your current code) for self-service.

List merge proposals; filter by status.

GET /v2/admin/compliance/account-merge/{id}

POST /v2/admin/compliance/account-merge/{id}/cancel

Execute a PROPOSED merge. Feature-flag gated — returns 503 with code ACCOUNT_MERGE_EXECUTE_DISABLED until Sprint 10.

Compute the dependent-row preview without persisting anything. Safe to call repeatedly.

Persist a merge proposal. Reason ≥ 8 chars; conflict if either user has an open proposal.

List edit-audit log entries for an activity (PRD §17.8 G-6). Admin-only. Filter by editor / role / date-range; pagination via limit + offset.

Run dispatcher: aggregates usage logs + emits ai_cost_budget.<level> event. Returns the same verdict shape as snapshot.

Read-only snapshot of current period AI cost vs budget. Returns alert level + projection + top-5 burners. Does NOT emit events.

Read a deal’s conversation.

Post into a deal’s conversation as Repeak. Both sides are told.

The commission rate and hold window in force.

Set the commission rate. Applies to deals accepted from now on — never to ones already agreed.

Deals with an open dispute, oldest first.

Decide a dispute. RELEASED/WITHDRAWN let the payout proceed; UPHELD leaves it held for a manual refund.

Deals ready to pay out.

Put a payout back on hold, with a reason the athlete can read. Omit `until` to hold indefinitely.

Payout instructions for one deal — masked account + net of TDS.

Record that the brand’s money was received.

Release one held deal early. Refused while a dispute is open.

Record that a matured deal was actually paid. Requires a verified payout account.

Release every hold whose window has matured.

Product-deal delivery queue and carrier exceptions.

V3-P1-026 — DAU/WAU/MAU + D1/D7/D30 retention. Retention buckets return null (NOT_INSTRUMENTED) until cohort signup-day audit access ships.

V3-P1-024 — 5-funnel attribution counts

V3-P1-023 — onboarding funnel drop-off counts

V3-P1-041 — performance monitoring (p50/p95/p99). Honestly NOT_INSTRUMENTED until OpenTelemetry/Datadog wired; runbook returned.

V3-P1-025 — weekly active athletes (last 7d)

GET /v2/admin/anti-cheat/appeals

GET /v2/admin/anti-cheat/appeals/{appealId}

POST /v2/admin/anti-cheat/appeals/{appealId}/decision

GET /v2/admin/anti-cheat/flags/{flagId}

POST /v2/admin/anti-cheat/flags/{flagId}/decision

GET /v2/admin/anti-cheat/flags/{flagId}/responses

GET /v2/admin/anti-cheat/governance

PATCH /v2/admin/anti-cheat/governance/mode

PATCH /v2/admin/anti-cheat/governance/rules/{ruleKey}

GET /v2/admin/anti-cheat/queue

List both platform policies + audit metadata.

Update a platform policy. 400 on bad semver or min>latest (lockout guard).

Best-effort blast radius for a proposed minimum (users it would force-update).

Admin audit-log viewer — closed-allowlist projection + redacted metadata. Filter by actor / subjectType+subjectId / action / date range. Cursor-paginated.

Audit-log chain health — recomputes SHA-256 entry_hash for the latest N rows and walks prev_hash linkage. Returns brokenLinkCount, firstBrokenSequence, and up to 10 broken-link diagnostics. Window param defaults to 10000 (capped at 100000).

Admin audit-log CSV export. Body carries the same filters as the viewer plus a 10–500 char reason; backend emits `admin.audit_log.exported` audit with `{ filterDigest, rowCount, reasonLen }`. Hard cap 5000 rows.

DEPRECATED — use /v2/admin/audit-log (singular) instead. Retained for back-compat; metadata is now defense-in-depth redacted to match the canonical viewer.

Approve a brand-sponsored challenge

Reject a brand-sponsored challenge

List brand challenges awaiting admin approval

List fulfillment queue (admin)

Create a fulfillment task (admin or auto-flow)

Assign a PENDING fulfillment task to an ops user

Transition a fulfillment task

List fulfillment tasks with SLA aging class

List brand stories across every brand (moderation queue).

Force a story out of public view (→ ARCHIVED), bypassing brand ownership. Requires an audited reason (≥10 chars).

GET /v2/admins/challenge-badge-requests

GET /v2/admins/challenge-badge-requests/{id}

POST /v2/admins/challenge-badge-requests/{id}/complete

POST /v2/admins/challenge-badge-requests/{id}/reject

List chargebacks with defend-flow projection. Filters: defendStatus / search (gatewayCaseId) / fromDate / toDate. Paginated.

Detail projection: includes evidence list + defense draft + reviewer fields. paymentId is unmasked here (admin scope).

Cancel a non-terminal chargeback (e.g. duplicate webhook, gateway dropped the case).

Save defense draft (autosave-friendly). Caps at 4000 chars. Recomputes derived defendStatus.

Add an evidence item. kind enum + (fileUrl absolute http(s) OR description) required.

Mark a non-SUBMITTED chargeback as EXPIRED. Allowed when the gateway deadline has passed without submission.

Mark a SUBMITTED chargeback as LOST. Records resolvedByUserId + resolvedAt + resolutionReason.

Mark a SUBMITTED chargeback as WON. Records resolvedByUserId + resolvedAt + resolutionReason.

Submit defense packet. Requires ≥2 evidence items + ≥40-char draft. Honesty: gatewaySubmissionStatus is set to MANUAL_GATEWAY_UPLOAD_REQUIRED — no real Cashfree/Razorpay dispute API integrated yet.

GET /v2/admin/clubs/{clubId}/chat/messages

DELETE /v2/admin/clubs/{clubId}/chat/messages/{msgId}

GET /v2/admin/clubs/chat/recent-activity

Platform admin: set/clear the club-wide subscription commission override.

Platform admin: set/clear the per-tier club subscription commission.

Platform admin: resolved commission split for a saved tier, plus the raw tier/club overrides.

List club KYC submissions awaiting review. Defaults to UNDER_REVIEW; supports ?state= and ?page=&limit=.

Full club KYC detail — includes the document URLs and full bank account details so the reviewer can actually inspect the submission.

Approve an UNDER_REVIEW club KYC.

Reject an UNDER_REVIEW club KYC. Reason required (10-500 chars), shown verbatim to the club.

Send an UNDER_REVIEW club KYC back for changes (RESUBMIT) without a hard rejection. Reason required (10-500 chars).

Full club KYC detail for a given club, looked up by clubId rather than kycId. Returns null (not 404) when the club has never started a KYC submission — powers the combined onboarding+KYC review page.

Paginated admin queue. Default status = PENDING_APPROVAL. Other accepted: ACTIVE, SUSPENDED.

Approve a PENDING_APPROVAL club. PENDING_APPROVAL → ACTIVE.

Reject a PENDING_APPROVAL club. PENDING_APPROVAL → SUSPENDED. Reason required (10-500 chars), returned verbatim to the organizer.

RC grant queue, OLDEST FIRST (longest-waiting club at the top). Filter with ?status=REQUESTED|APPROVED|REJECTED|CANCELLED, ?clubId=, ?page=, ?limit=.

One RC grant request, plus the requesting club's total outstanding granted-RC debt in COINS (with a rupee estimate at today's rate) — the number a reviewer needs before handing over more.

Approve an RC grant. Omit approvedRc to grant the full ask; supply a smaller number to trim it (never larger). In one transaction this records the granted COINS as the debt, notes the current platform rate as history only, and credits the club creator wallet. The rupee amount is NOT fixed here — it is computed at payout time from the live rate. Idempotent — approving twice credits once.

Reject an RC grant request. Reason required (10-1000 chars), shown verbatim to the club. Credits nothing and creates no debt.

GET /v2/admin/clubs

GET /v2/admin/clubs/{id}

PATCH /v2/admin/clubs/{id}

GET /v2/admin/clubs/{id}/announcements

POST /v2/admin/clubs/{id}/announcements

POST /v2/admin/clubs/{id}/deactivate

GET /v2/admin/clubs/{id}/members

POST /v2/admin/clubs/{id}/members

DELETE /v2/admin/clubs/{id}/members/{userId}

PATCH /v2/admin/clubs/{id}/members/{userId}

GET /v2/admin/clubs/{id}/moderation-reports

POST /v2/admin/clubs/{id}/reactivate

POST /v2/admin/clubs/{id}/verify-approve

POST /v2/admin/clubs/{id}/verify-reject

DELETE /v2/admin/clubs/announcements/{annId}

GET /v2/admin/clubs/runs

GET /v2/admin/clubs/verification-queue

POST /v2/admin/clubs/attendance/infer

GET /v2/admin/clubs/runs/{runId}/attendance

POST /v2/admin/clubs/runs/{runId}/attendance/manual

GET /v2/admin/community-guidelines

POST /v2/admin/community-guidelines

GET /v2/admin/community-guidelines/{id}

PATCH /v2/admin/community-guidelines/{id}

Consent-Manager vendor wiring status. Reports whether credentials are configured; never leaks the creds.

List erasure requests filtered by status.

Reject an erasure request because a legal hold blocks it. Statute + retention date mandatory.

Advance cool-off-eligible requests to CONFIRMED. Scheduled worker calls this too.

View a principal's full consent history (admin support).

GET /v2/admin/content-feed

POST /v2/admin/content-feed

DELETE /v2/admin/content-feed/{id}

GET /v2/admin/content-feed/{id}

PATCH /v2/admin/content-feed/{id}

PATCH /v2/admin/content-feed/{id}/publish

POST /v2/admin/content-feed/{id}/restore

PATCH /v2/admin/content-feed/{id}/unpublish

POST /v2/admin/content-feed/cover-images

POST /v2/admin/csat

GET /v2/admin/csat/by-ticket/{ticketId}

GET /v2/admin/csat/recent

GET /v2/admin/csat/summary

GET /v2/admin/dm/threads

GET /v2/admin/dm/threads/{id}/messages

GET /v2/admin/enrichment/active-alerts

GET /v2/admin/enrichment/anti-cheat/peer-comparison/{activityId}

GET /v2/admin/enrichment/organizers/{id}/feedback

GET /v2/admin/enrichment/organizers/{id}/risk

GET /v2/admin/experiments

POST /v2/admin/experiments

DELETE /v2/admin/experiments/{key}

GET /v2/admin/experiments/{key}

PATCH /v2/admin/experiments/{key}

GET /v2/admin/experiments/{key}/results

POST /v2/admin/experiments/significance

Read-only snapshot of all 8 EXT adapter readiness flags + blockers + NOT_CONFIGURED error codes.

GET /v2/admin/feature-flags/canonical

GET /v2/admin/feature-flags/canonical/{key}

GET /v2/admin/feature-flags/inventory

GET /v2/admin/feature-flags/inventory/{key}

POST /v2/admin/feature-flags/mutation-check

GET /v2/admin/platform-feature-flags

POST /v2/admin/platform-feature-flags

DELETE /v2/admin/platform-feature-flags/{key}

PATCH /v2/admin/platform-feature-flags/{key}/rollout

POST /v2/admin/platform-feature-flags/guarded

GET /v2/admin/feed

DELETE /v2/admin/feed/{id}

GET /v2/admin/feed/{id}

POST /v2/admin/feed/{id}/hide

PATCH /v2/admin/feed/{id}/trust

POST /v2/admin/feed/{id}/unhide

GET /v2/admin/feed/comments

PATCH /v2/admin/feed/comments/{id}/hide

PATCH /v2/admin/feed/comments/{id}/unhide

GET /v2/admin/feed/hashtags

PATCH /v2/admin/feed/hashtags/{tag}/ban

GET /v2/admin/feed/hashtags/{tag}/posts

PATCH /v2/admin/feed/hashtags/{tag}/unban

List edge-case verdicts flagged for admin review. Paginated. Cross-link §71 G-71-9 review queue.

Recent edge-case verdicts for a single hybrid-race result. Used by admin result-detail UI to show timeline of observations.

End an impersonation session. Revokes the minted token so the session dies before its TTL.

Start an impersonation session. Returns a short-lived USER-role access token for the target user. Reason is required and logged.

POST /v2/admin/integrations/apple-health/upload

GET /v2/admin/integrations/health

GET /v2/admin/integrations/logs

List KB articles, optionally by status.

Create a KB article (DRAFT).

Get a KB article by id.

Update a KB article (bumps version).

Archive a KB article.

Publish a KB article.

POST /v2/admin/lifecycle/triggers/run

GET /v2/admin/lifecycle/triggers/summary

GET /v2/admin/lifecycle/triggers/trends

GET /v2/admin/lifecycle/users/{userId}/history

List marketplace economics configs with optional status filter (DRAFT/ACTIVE/INACTIVE/ARCHIVED).

Create marketplace economics config (admin)

Single config detail

Update marketplace economics config (admin)

Activate config. Auto-deactivates the prior ACTIVE row to INACTIVE. Refuses ARCHIVED → ACTIVE.

Archive config (permanent retire — audit trail)

Honest revenue projection — gross/platformFee/sellerPayout/tax/net/orderCount/refundAmount. ALWAYS null with sourceStatus today; no marketplace order/payment source table exists yet.

List master events for governance.

Inspect one master event.

GET /v2/admin/master-events/{eventId}/orders

GET /v2/admin/master-events/{eventId}/participants

GET /v2/admin/master-events/{eventId}/rewards

Moderate master-event publication status.

POST /v2/admin/master-events/orders/{orderId}/reconcile-refund

POST /v2/admin/master-events/orders/{orderId}/reconcile-settlement

PATCH /v2/admin/master-events/rewards/{grantId}

GET /v2/admin/moderation/media

GET /v2/admin/moderation/media/{assetId}

POST /v2/admin/moderation/media/{assetId}/approve

POST /v2/admin/moderation/media/{assetId}/reject

GET /v2/admin/mobile-experiences

POST /v2/admin/mobile-experiences

DELETE /v2/admin/mobile-experiences/{id}

GET /v2/admin/mobile-experiences/{id}

PATCH /v2/admin/mobile-experiences/{id}

GET /v2/admin/mobile-experiences/{id}/analytics

GET /v2/admin/mobile-experiences/{id}/eligibility

POST /v2/admin/mobile-experiences/{id}/pause

POST /v2/admin/mobile-experiences/{id}/publish

GET /v2/admin/mobile-experiences/destinations

GET /v2/admin/mobile-experiences/destinations/search

Upload one promotional image or MP4 creative

GET /v2/admin/mobile-experiences/options

GET /v2/admin/metrics/north-star

GET /v2/admin/metrics/revenue-series

GET /v2/admin/notifications/retry-policies

POST /v2/admin/notifications/retry-policies

GET /v2/admin/notifications/retry-policies/{id}

PATCH /v2/admin/notifications/retry-policies/{id}

GET /v2/admin/nutrition/fueling-templates

POST /v2/admin/nutrition/fueling-templates

DELETE /v2/admin/nutrition/fueling-templates/{id}

GET /v2/admin/nutrition/fueling-templates/{id}

PATCH /v2/admin/nutrition/fueling-templates/{id}

POST /v2/admin/nutrition/fueling-templates/{id}/restore

GET /v2/admin/nutrition/sources

POST /v2/admin/nutrition/sources

PATCH /v2/admin/nutrition/sources/{key}

Toggle source enabled flag.

Idempotently seed the IFCT 2017 dataset (~40 staples). Repeatable; subsequent calls update existing rows.

GET /v2/admin/observability/metrics

GET /v2/admin/observability/metrics.prom

GET /v2/admin/observability/otlp-status

POST /v2/admin/observability/otlp/export-now

GET /v2/admin/observability/errors

GET /v2/admin/observability/pagerduty

POST /v2/admin/observability/pagerduty/test

GET /v2/admin/observability/queues

GET /v2/admin/observability/slo

GET /v2/admin/official-partners

Create an Organizer/Club official partnership

Remove an Official Repeak Partner record

GET /v2/admin/official-partners/{id}

Update an Official Repeak Partner record

GET /v2/admin/official-partners/benefit-definitions

GET /v2/admin/official-partners/candidates

GET /v2/admin/official-partners/exclusive-tab

Configure the single athlete exclusive partner tab

GET /v2/admin/official-partners/exclusive-tab/targets

Upload an Official Partner image logo

GET /v2/admin/ab-tests

PUT /v2/admin/ab-tests/{key}

GET /v2/admin/chargebacks

POST /v2/admin/chargebacks/{id}/resolve

GET /v2/admin/disputes

GET /v2/admin/disputes/{id}

GET /v2/admin/disputes/{id}/evidence

POST /v2/admin/disputes/{id}/evidence

GET /v2/admin/disputes/{id}/messages

POST /v2/admin/disputes/{id}/messages

POST /v2/admin/disputes/{id}/resolve

GET /v2/admin/feature-flags

PUT /v2/admin/feature-flags/{key}

PUT /v2/admin/feature-flags/{key}/audience

POST /v2/admin/feature-flags/{key}/audience/preview

POST /v2/admin/feature-flags/{key}/guarded

GET /v2/admin/moderation/report-strikes

GET /v2/admin/moderation/warning-standings

GET /v2/admin/reports

GET /v2/admin/reports/{id}

POST /v2/admin/reports/{id}/resolve

GET /v2/admin/reports/appeals

GET /v2/admin/reports/appeals/{appealId}

POST /v2/admin/reports/appeals/{appealId}/decide

POST /v2/admin/reports/appeals/bulk-decide

POST /v2/admin/users/{id}/password-reset

POST /v2/admin/users/{id}/rc-adjust

POST /v2/admin/users/{id}/restrict

GET /v2/admin/users/{id}/restrictions

GET /v2/admin/users/{id}/restrictions/history

POST /v2/admin/users/{id}/suspend

POST /v2/admin/users/{id}/unrestrict

POST /v2/admin/users/{id}/unsuspend

List organizer KYC submissions awaiting admin review. Defaults to UNDER_REVIEW; supports ?state= and ?page=&limit=.

Approve an UNDER_REVIEW organizer KYC.

Reject an UNDER_REVIEW organizer KYC. Reason required (10-500 chars), returned verbatim to the organizer.

GET /v2/admin/saas/plans

PUT /v2/admin/saas/plans/{planKey}

GET /v2/admin/saas/subscriptions

GET /v2/admin/payment-providers

GET /v2/admin/payments

GET /v2/admin/webhook-events

GET /v2/admin/webhook-events/{id}

Acknowledge a webhook event log row (manual reconciliation). Emits webhook_event.acknowledged.

Cancel a poisoned webhook event log row. Emits webhook_event.cancelled.

Mark a webhook event for replay. Emits webhook_event.replayed.

List payout requests, optionally by status / payee type / club. `payeeType=CLUB` (or any `clubId`) narrows to the club payout queue.

Approve (UNDER_REVIEW → APPROVED).

Mark paid (APPROVED → PAID). Payment reference required.

Reject (UNDER_REVIEW → REJECTED). Reason required.

Start review (REQUESTED → UNDER_REVIEW).

GET /v2/admin-permissions

GET /v2/admin-permissions/{id}

PATCH /v2/admin-permissions/{id}

GET /v2/admin/photos

GET /v2/admin/photos/{id}

POST /v2/admin/photos/{id}/moderate

PATCH /v2/admin/photos/{id}/visibility

POST /v2/admin/photos/{photoId}/matches/manual

DELETE /v2/admin/photos/matches/{matchId}

GET /v2/admin/photos/stats

GET /v2/admin/platform-health

GET /v2/admin/platform-health/jobs

GET /v2/admin/platform-health/services

GET /v2/admin/platform-health/slow-queries

List pricing tiers (DRAFT/INACTIVE/ARCHIVED included).

Create pricing tier (admin)

Update pricing tier (admin)

Activate pricing tier (admin)

Archive pricing tier (admin)

Approve or reject a pending edition proof (idempotent).

A1 — revoke a granted (valid) proof: strip leaderboard, revoke certificate, claw back finisher RC.

Edition proofs awaiting manual anti-cheat review.

GET /v2/admin/provider-readiness

GET /v2/admin/rate-limits/blocked

POST /v2/admin/rate-limits/unblock

GET /v2/admin/rc/redemptions

POST /v2/admin/rc/redemptions/{id}/cancel

POST /v2/admin/rc/redemptions/{id}/deliver

POST /v2/admin/rc/redemptions/{id}/fulfill

POST /v2/admin/rc/redemptions/{id}/ship

POST /v2/admin/rc/redemptions/{id}/ship-via-shiprocket

GET /v2/admin/rc/rules

PUT /v2/admin/rc/rules/{ruleKey}

GET /v2/admin/rc/store-items

PUT /v2/admin/rc/store-items/{sku}

GET /v2/admin/referrals/by-referrer/{userId}

POST /v2/admin/referrals/replay/dry-run

POST /v2/admin/referrals/replay/execute

GET /v2/admin/referrals/settlements

GET /v2/admin/referrals/summary

GET /v2/admin/referrals/trends

GET /v2/admin/refunds

POST /v2/admin/refunds/{id}/cancel

POST /v2/admin/refunds/{id}/mark-manual-refunded

POST /v2/admin/retention/cohorts/snapshot

GET /v2/admin/retention/cohorts/summary

GET /v2/admin/retention/dashboard

GET /v2/admin/retention/trends

GET /v2/admin/retention/users/{userId}/cohort

List all 8 revenue stream rows. Filters apply post-aggregation.

Single stream detail. 404 on unknown streamCode.

GET /v2/admin/reward-pools

POST /v2/admin/reward-pools/{id}/manually-fund

POST /v2/admin/reward-pools/{id}/refund

POST /v2/admin/reward-pools/{id}/review

Risk register snapshot — 13 launch-blocking domain probes with current health, signal, last-checked, recommended action, and runbook anchor.

Drill-down for a specific risk id.

Admin acknowledges current risk state. Writes a hash-chained audit row "risk.acknowledged".

Admin escalates a risk. Writes a hash-chained audit row "risk.escalated". Use for SEV1 invocation per crisis runbook.

List all routes (incl. inactive) for admin management.

Create a curated route.

Soft-delete a route.

Update a route (partial).

Show/hide a route from the athlete list.

GET /v2/admin/scheduler/jobs

GET /v2/admin/scheduler/jobs/{name}

POST /v2/admin/scheduler/jobs/{name}/run

Force-create every collection (idempotent) and return the current catalog.

Search engine + per-collection health overview (Typesense doc counts joined with Postgres row counts for drift detection).

Queue a bulk reindex for the named collection. Non-blocking: returns immediately. Actual walk happens inside SearchReindexScheduler.

GET /v2/admin/sponsors/accounts/{accountId}/activity

PATCH /v2/admin/sponsors/accounts/{accountId}/status

GET /v2/admin/sponsors/brands/{brandId}/accounts

POST /v2/admin/sponsors/brands/{brandId}/accounts

PATCH /v2/admin/sponsors/brands/{brandId}/approval

GET /v2/admin/sponsors/brands/{brandId}/contracts

POST /v2/admin/sponsors/brands/{brandId}/contracts

POST /v2/admin/sponsors/contracts/{contractId}/activate

POST /v2/admin/sponsors/contracts/{contractId}/cancel

POST /v2/admin/sponsors/contracts/{contractId}/end

GET /v2/admin/sponsors/brands/{brandId}/metrics

GET /v2/admin/sponsors/attachments/{id}/history

List sponsor campaigns in the review queue. Defaults to PENDING_APPROVAL; supports ?status= and ?page=&limit=.

Approve a PENDING_APPROVAL campaign. Transitions to LIVE if startDate ≤ now, otherwise SCHEDULED.

Reject a PENDING_APPROVAL campaign. Reason required (10-500 chars); returned verbatim to brand owner.

List sponsor cohorts in the review queue. Defaults to PENDING_APPROVAL; supports ?status= and standard ?page=&limit= pagination.

Approve a PENDING_APPROVAL sponsor cohort.

Reject a PENDING_APPROVAL sponsor cohort. Reason is required (10-500 chars) and is returned verbatim to the brand owner.

Queue. Defaults to every status; filter with ?status=.

Approve and credit the brand wallet. approvedRc may be less than requested, never more. Re-running is a no-op.

Reject. Reason is mandatory, 10-500 chars.

List sponsorship deals in the review queue. Defaults to PROPOSED; supports ?status= and ?page=&limit=.

Accept a PROPOSED or UNDER_REVIEW deal. Transitions to CONTRACT_PENDING.

Activate a CONTRACT_UPLOADED deal. Transitions to ACTIVE.

Counter-offer a PROPOSED or UNDER_REVIEW deal. amount > 0; notes 10-500 chars (returned verbatim to brand).

Reject a PROPOSED, UNDER_REVIEW, or COUNTERED deal. Reason required (10-500 chars), returned verbatim to brand.

Mark a PROPOSED deal as UNDER_REVIEW (lighter touch than accept).

List feature categories

List feature dependencies, by code

Declare that one feature requires another. Cycles are rejected — they would make publish validation unsatisfiable for both.

Remove a feature dependency

Reconcile feature codes gated in CODE against feature rows in CONFIG. Reports gates with no row (unconfigurable) and rows with no gate (unenforced).

Map a plan price to its provider-side plan id. Required before a paid price can be published.

Payment providers with `adapterDeployed` — a false value means the row is inert and must not be offered as a choice.

Create or update a provider. Enabling one with no compiled adapter is rejected.

List pricing regions

Create or update a pricing region. A country may belong to only one region.

Tax categories with their effective-dated rates

Create or rename a tax category

Add an effective-dated rate. Supersedes the open rate for the same scope rather than editing it — historic invoices must stay reconstructable.

List coupons with claim counts

Create a coupon (money fields are minor units)

Coupon detail + scopes + committed/pending/remaining

Edit a coupon. Discount value fields return 409 COUPON_VALUE_FROZEN once claimed.

Redemption counts and total discount given, in minor units

Preview the exact line items and rejection reason a user would get for this coupon

Replace eligibility scopes. OR within a scope type, AND across types.

Pause / resume instantly — the promo kill switch

Generate N unique codes from a prefix, sharing one config via batchTag

Release PENDING reservations past their TTL so abandoned checkouts stop holding slots

Churn rate and counts over N days (default 30), broken down by cancellation reason.

MRR (normalised monthly), active/trial/past-due counts, ARPU, plan and store breakdown.

Trial-to-paid conversion for trials STARTED in the window, so the cohort is fixed.

Store event ledger. Filter `status=UNMAPPED` for purchases that landed with no matching plan mapping — those are real customers waiting on config.

Re-run a stored event through ingest. Re-normalises from the raw payload, so it picks up mapping and code fixes.

Expire lapsed subscriptions now. Idempotent. Intended for Cloud Scheduler, since Cloud Run scale-to-zero can starve the in-process cron.

Read-only comparison of the engine against the legacy organizer subscriptions. Migration gate: drifted must be 0.

Seed the Athlete / Passport / Champion tiers, prices and feature mappings. Idempotent — existing rows are skipped, never overwritten.

Subscription master switch, plus launch-readiness signals (store mappings, unmapped events, engine source).

Update the master switch. Partial — only supplied fields change. Turning the master off also stands down enforcement.

Store product mappings joined to plan + price. `priceMatchesStore:false` means the paywall shows a price the store will not charge.

Map a plan price to a store product. `markSynced` asserts the product is live in the store console — it is what makes the price purchasable on mobile.

Remove a mapping. The price stops being purchasable on that store immediately; existing subscribers are unaffected.

Search subscribers by user id, store transaction id or product. Filterable by status/plan/source.

Full record for one subscription: state, resolved entitlements, and the last 50 store events.

Extend a subscription by N days. Additive, audited, reason required.

Revoke a subscription immediately. Does not refund. Audited, reason required.

Which source the resolver is reading and how many plans exist in the DB

Create a gateable feature

Flat list of mappable plan prices (plan × version × cycle × currency). Feeds the store-product mapping picker — `plans` returns bare rows with no nested versions or prices to walk.

List all plans, optionally filtered by audience

Create a plan (starts as DRAFT with an empty v1 draft version)

Edit plan presentation. Safe at any time — no effect on live mandates.

Field-level diff between two versions

Live subscriber count per version — read before publish or retire

Mint a DRAFT version copied from the current PUBLISHED one. This is how a price change happens.

Transcribe the static plan catalog into the DB. Idempotent; the cutover step from architecture doc §7.

Dry-run the resolver and (optionally) the quote for a user / plan / country / coupon

Edit DRAFT version terms (trial, tax, renewal)

Map a feature onto a version. On a PUBLISHED version only non-restrictive edits are accepted (409 REQUIRES_NEW_VERSION otherwise).

Add or update a price on a DRAFT version

Freeze commercial terms and make the version sellable. Fails with a field-level error list.

Stop new sales. Existing subscribers keep resolving through this version.

Publish checklist without publishing. Empty array = ready to publish.

ClearTax vendor wiring status. Never leaks secrets; reports presence only.

List all Form 16A rows for FY + quarter.

Generate a Form 16A PDF via ClearTax. 503s cleanly when vendor is not wired.

Aggregate one quarter into a Form 16A DRAFT. Idempotent; re-runs refresh DRAFT sums.

List prize-tax rows.

Create a prize-tax settlement. Idempotent on resultId when supplied.

Run 194-B math on a prize-tax row + advance to CALCULATED.

Advance TDS_DEDUCTED → DISBURSED.

Advance CALCULATED → TDS_DEDUCTED.

CSV export of prize-tax rows for an FY. Optional status filter.

List tax invoices; filter by FY + status.

Issue a DRAFT invoice via ClearTax (may 503).

CSV export of tax invoices for an FY. Returns a CSV payload as string; caller wraps in download.

Manually run the backfill worker that drafts invoices + 194-O rows.

List TDS rows; filter by section + FY + quarter.

CSV export of TDS rows for an FY + section.

GET /v2/admin/training-templates

POST /v2/admin/training-templates

DELETE /v2/admin/training-templates/{id}

GET /v2/admin/training-templates/{id}

PATCH /v2/admin/training-templates/{id}

Flip published flag. `{ published: true|false }`.

POST /v2/admin/trust-export

GET /v2/admin/trust-export/dry-run

POST /v2/admin/trust-export/jsonl

GET /v2/admin/users

GET /v2/admin/users/{id}/activities

GET /v2/admin/users/{id}/challenges

GET /v2/admin/users/{id}/events

GET /v2/admin/users/{id}/overview

GET /v2/admin/users/{id}/wallet/history

GET /v2/admin/verification/clubs

GET /v2/admin/verification/clubs/{clubId}

POST /v2/admin/verification/clubs/{clubId}/approve

POST /v2/admin/verification/clubs/{clubId}/reject

GET /v2/admin/verification/organizers

GET /v2/admin/verification/organizers/{id}

POST /v2/admin/verification/organizers/{id}/approve

PATCH /v2/admin/verification/organizers/{id}/eazr-tag

POST /v2/admin/verification/organizers/{id}/reject

GET /v2/admin/verification/sponsors

GET /v2/admin/verification/sponsors/{brandId}

POST /v2/admin/verification/sponsors/{brandId}/approve

POST /v2/admin/verification/sponsors/{brandId}/reject

GET /v2/admin/verification/sponsors/{brandId}/vendor-results

GET /v2/admin/wearables

PUT /v2/admin/wearables/{provider}/credentials

POST /v2/admin/wearables/{provider}/test-connection

GET /v2/bib-claim-terms

GET /v2/bib-claim-terms/{eventId}

PUT /v2/bib-claim-terms/{eventId}

GET /v2/admin/events/{eventId}/badge

Retrieve multiple Admins

Create a single Admin

Delete a single Admin

Retrieve a single Admin

Update a single Admin

Replace a single Admin

POST /v2/admins/bootstrap

Create multiple Admins

GET /v2/admins/handle/{handle}

GET /v2/admins/handle/check

GET /v2/admins/me

GET /v2/admins/notification-preferences/me

PATCH /v2/admins/notification-preferences/me

POST /v2/admins/send-otp

Ask the AI coach. Returns Claude Sonnet reply + any structured tool calls. 503 when ANTHROPIC_API_KEY is unset.

§24.3 — preview the 8 context streams the coach assembles for this athlete.

§24 — list this athlete's coach conversation history (default thread).

Coach health probe — enabled flag + active model. Never 503s.

Sprint 8 — voice-assisted coach ask. Accepts base64 audio, runs Sarvam STT in the requested locale, and forwards the transcription to the text `ask` endpoint. 503 `SARVAM_NOT_CONFIGURED` when the backend has no Sarvam key.

Sprint 8 — text-to-speech for the coach reply. Returns a base64 audio blob in the requested locale. 503 `SARVAM_NOT_CONFIGURED` when the backend has no Sarvam key.

Get legacy analytics (deprecated - use admin/dashboard instead)

Legacy endpoint for backward compatibility. Use GET /analytics/admin/dashboard for new implementations.

Get comprehensive admin dashboard analytics

Returns platform-wide analytics for admin dashboard including: - Platform overview (users, organizers, events, challenges, revenue) - User analytics (growth trends, demographics, active users) - Event analytics (by status, category, type, ticket sales) - Challenge analytics (by type, participation, completion rates) - Financial analytics (revenue, commissions, refunds, payment methods) - Coin economy analytics (circulation, transactions, top holders) - Fitness analytics (activities, steps, calories) - Organizer analytics (top performers, approval status) - Support analytics (tickets by status, category, resolution time)

Get detailed admin finance analytics

Returns comprehensive financial analytics for admin including: - Revenue overview (total revenue, platform commission, net revenue, growth metrics) - Payment analytics (by method, success/failure rates, average transaction value) - Refund analytics (total refunds, by status, refund rate) - Commission analytics (total commission, average rate, breakdown by organizer) - Organizer financials (top earners, revenue distribution) - Event financials (top revenue events, average ticket price) - Transaction trends (daily/weekly/monthly patterns) - Coin financials (total coins in circulation, purchase/redemption stats)

Get comprehensive organizer dashboard analytics

Returns organizer-specific analytics including: - Overview (events, challenges, products, coupons, revenue, ratings) - Event performance (per-event details, capacity, revenue, bookings) - Challenge performance (participation, completion rates, coins rewarded) - Financial summary (gross/net revenue, commissions, refunds) - Customer insights (unique customers, booking trends) - Coupon analytics (usage, top coupons, discount given) - Product analytics (by category, active products)

Get finance analytics scoped to a single event (Missing-API P2, BACKEND_API_SPEC.md §2.1).

Per-event equivalent of GET /analytics/organizer/finance — grossRevenue, netRevenue, platformFee, totalRefunded, refundedPercent, averageOrderValue, totalBookings, paymentsByMethod[], registrationsByDay[], couponUsage[], all scoped to a single eventId instead of the org-wide response.

Get detailed organizer finance analytics

Returns comprehensive financial analytics for organizer including: - Revenue overview (gross revenue, platform commission, net revenue, growth metrics) - Payment analytics (by method, success/failure rates) - Refund analytics (total refunds, by status, refund rate) - Event revenue breakdown (revenue per event, top performing events) - Settlement info (pending settlement, next settlement date) - Transaction history (recent transactions with details) - Coupon impact (total discount given, usage stats, top coupons)

POST /v2/anti-cheat/live-signals

GET /v2/anti-cheat/my-appeals

GET /v2/anti-cheat/my-appeals/{appealId}

GET /v2/anti-cheat/my-flags

GET /v2/anti-cheat/my-flags/{flagId}

POST /v2/anti-cheat/my-flags/{flagId}/appeal

POST /v2/anti-cheat/my-flags/{flagId}/respond

GET /v2/anti-cheat/my-flags/{flagId}/responses

GET /v2/anti-cheat/my-flags/by-activity/{activityId}

GET /v2/anti-cheat/my-status

Per-platform force/soft update policy for the caller version. Fails open.

GET /v2/app-frequently-asked-questions

POST /v2/app-frequently-asked-questions

DELETE /v2/app-frequently-asked-questions/{id}

GET /v2/app-frequently-asked-questions/{id}

PATCH /v2/app-frequently-asked-questions/{id}

GET /v2/app-frequently-asked-questions/{id}/public

PATCH /v2/app-frequently-asked-questions/{id}/toggle

GET /v2/app-frequently-asked-questions/public

Public KB search — relevance-ranked results across question + answer.

GET /v2/app-privacy-policies

POST /v2/app-privacy-policies

DELETE /v2/app-privacy-policies/{id}

GET /v2/app-privacy-policies/{id}

PATCH /v2/app-privacy-policies/{id}

GET /v2/app-privacy-policies/{id}/public

PATCH /v2/app-privacy-policies/{id}/toggle

GET /v2/app-privacy-policies/active

GET /v2/app-terms-and-conditions

POST /v2/app-terms-and-conditions

DELETE /v2/app-terms-and-conditions/{id}

GET /v2/app-terms-and-conditions/{id}

PATCH /v2/app-terms-and-conditions/{id}

GET /v2/app-terms-and-conditions/{id}/public

PATCH /v2/app-terms-and-conditions/{id}/toggle

GET /v2/app-terms-and-conditions/active

Get all approvals with filters and pagination

Get approval details by type and ID

Review (approve/reject) any approval type

Get KYC details by ID

Review (approve/reject) KYC

Get approval summary (counts by status)

GET /v2/users/me/preferred-sports

GET /v2/user-feed

Enrol the authenticated athlete in a published training-program template.

Week-by-week schedule preview for a published template.

Submit (or update) a program review. Requires a COMPLETED enrollment for this template.

Browse the admin-authored Phase-1 launch library (platform-curated programs).

List the athlete's training-program enrollments.

Cancel an enrollment.

Adherence + schedule progress for one of the athlete's enrollments.

Browse the published training-program library with filters.

Flag a review for moderation.

Mark a review helpful (athlete-only).

Today's workout for the athlete's active enrollment (rest day → workout=null with reason).

Mid-workout feedback verdict given the athlete's current pace.

Campaigns currently targeting me. Returns creative + brand identity only — never cohort, budget or targeting data.

Record a tap on the campaign CTA, and get back the URL to open.

Record a view of a campaign I was served.

Coupon codes assigned to me, newest first. Includes the code itself, what it is for, and whether it is redeemed or expired.

Mark one of my coupons used. Idempotent — a second call returns the original redemption time rather than moving it.

Viewer-aware master journey and eligibility.

Leave the master journey.

Join the master journey independently.

Conditional master points leaderboard.

Verify bundle payment and atomically enroll children.

Master enrollment quote and compatibility.

My finalized master reward grants.

GET /v2/users/me/promotions

POST /v2/users/me/promotions/{promotionId}/click

POST /v2/users/me/promotions/{promotionId}/impression

GET /v2/events/{eventId}/club-claim-page

GET /v2/events/{eventId}/participants/by-bib

GET /v2/events/{eventId}/premium

POST /v2/events/{eventId}/registration-claim/confirm

POST /v2/events/{eventId}/registration-claim/lookup

GET /v2/events/{eventId}/registration-claim/mine

POST /v2/events/{eventId}/registration-claim/send-otp

GET /v2/events/{eventId}/registration-claim/terms

POST /v2/events/{eventId}/registration-claim/verify

GET /v2/event-participations/{bookingId}/deliverables

PATCH /v2/event-participations/{bookingId}/deliverables/{deliverableId}/address

POST /v2/event-participations/{bookingId}/deliverables/{deliverableId}/claim

GET /v2/event-participations/{bookingId}/finisher-card-context

GET /v2/event-participations/{bookingId}/race-pack

POST /v2/event-participations/{bookingId}/race-pack/reconcile

GET /v2/event-participations/{bookingId}/share-card-context

Attach a first phone number to the current (email/OAuth) account. Send the OTP first via POST /auth/send-otp, then submit it here.

GET /v2/auth/check-email

GET /v2/auth/check-phone-number

Logout from the session

Which login methods are available here.

Exchange and verify an Apple authorization, then sign in.

Apple browser form_post callback for Android.

Create a one-time Apple OAuth state and nonce.

Exchange a browser-bound Apple callback.

Sign in with a Google ID token.

OAuth provider configuration status.

Refresh Tokens

Send the OTP

Step-up auth: re-verify the caller via OTP for a sensitive op (account delete, wallet withdraw, payment-method edit).

Verify the OTP

Verify if token is valid and get user data

POST /v2/auth/web/logout

POST /v2/auth/web/session

Confirm TOTP enrollment with the first code from the authenticator. Flips totpEnabledAt and from then on login demands a code.

Disable TOTP. Requires the current code or a recovery code — prevents silent second-factor removal via stolen AT.

Begin TOTP enrollment. Returns otpauth URL + a scannable QR code (PNG data URI) + 10 recovery codes; show the codes ONCE and ask the user to save them off-platform.

Read the caller's current TOTP status. Unlike the access-token claim (stamped at login), this reflects live DB state — safe to re-check on every Security-screen mount.

Verify a TOTP code against the caller's enrollment. Used by `@RequiresStepUp`-style flows that prefer TOTP to OTP.

Email a 4-digit crew login code. Creates no account on its own.

Verify a crew login code and return a session. Auto-links every Volunteer/VolunteerHead row across all orgs that shares this email.

Log out of the crew session.

Refresh crew tokens.

SMS a 4-digit crew login code. Creates no account on its own.

Verify a crew SMS code and return a session. Auto-links every Volunteer/VolunteerHead row across all orgs that shares this phone.

Email a 4-digit login code. Creates no account on its own. Pass role=organizer to send it under the organizer-branded template instead.

Verify an email login code and return a session. Links to an existing account when the address is already known. role=organizer resolves into an Organizer account instead of an athlete — never creates one.

Queue an email verification link for the authenticated user. Required before emails leave the inbox (deliverability).

Verify an email by the token minted at send-verification. Public because it's hit from the user's inbox.

List the sign-in methods linked to my account.

Detach a sign-in method. Refused when it is the only one left on the account.

List registered passkeys for the caller.

Revoke one passkey.

Begin passkey authentication (step-up path).

Finish passkey authentication.

Begin passkey registration. Returns options to pass into navigator.credentials.create().

Finish passkey registration by submitting the authenticator response.

List the caller's auth sessions. Includes active + revoked; UI should hide revoked older than 30 days.

Revoke one session by id.

Revoke every session belonging to the caller EXCEPT the current one. "Log out everywhere else."

GET /v2/badges

POST /v2/badges

GET /v2/badges/{code}/public

DELETE /v2/badges/{id}

GET /v2/badges/{id}

PATCH /v2/badges/{id}

POST /v2/badges/{id}/duplicate

DELETE /v2/badges/{id}/map-challenge

POST /v2/badges/{id}/map-challenge

POST /v2/badges/{id}/preview

POST /v2/badges/{id}/retroactive-award

GET /v2/badges/{id}/stats

Resolve the bank and branch for an Indian IFSC.

Penny-drop verify a bank account. Returns { verified, accountExists, accountHolderName, utr, amountDeposited, transactionId } on success, or { verified: false, reason, message } when the account could not be verified.

Gallery: global templates + the caller organization's own templates.

Create a bib template. Admins create GLOBAL templates; organizers create ORGANIZER-scope templates owned by themselves.

DELETE /v2/bib-templates/{id}

GET /v2/bib-templates/{id}

PATCH /v2/bib-templates/{id}

Re-render the sample preview PNG (gallery thumbnail).

Home screen bootstrap — feed + activity summary + wallet + action-center + explore carousels in one request.

Profile screen bootstrap — user profile + follow counts + wallet summary in one request.

Everything the athlete has submitted on this deal.

Approve or reject a submission. Rejection requires a reason; approving the last one starts the payout hold.

POST /v2/sponsor/brands/{brandId}/ambassador-offers/{offerId}/message-attachment

The conversation on this deal, oldest first.

Send a message to the athlete.

DELETE /v2/sponsor/brands/{brandId}/ambassador-offers/{offerId}/messages/{messageId}

Mark everything from the athlete as read.

List inventory items for a brand.

Create an inventory item.

Update an item name / low-stock threshold.

Stock movement history for one item (delta / before / after), newest first. Derived from the audit trail, so it is a recent history rather than a permanent ledger.

Adjust stock by a delta (positive = restock, negative = consume). Crossing the threshold emits a low-stock audit alert.

List recent per-athlete reward grants.

Grant a reward to a specific athlete. Reason required; amount validated; idempotent on sequenceKey; audit-emitting.

Get daily calendar

Returns all calendar events for a specific date

Get monthly calendar

Returns all calendar events (training workouts, custom workouts, events, challenges) for a specific month

Get calendar for date range

Returns all calendar events for a custom date range

Get today's calendar

Returns all calendar events for today

Get all manual workouts

Get all custom workouts created by the user

Create a manual workout

Create a custom workout entry in your calendar

Delete a workout

Delete a custom workout

Get a specific workout

Get details of a specific workout

Update a workout

Update a custom workout

Mark workout as completed

Toggle workout completion status

Get workouts for a month

Get all custom workouts for a specific month

Get workout statistics

Get statistics for user workouts

GET /v2/challenges/{creatorType}/{creatorId}/badge-requests

POST /v2/challenges/{creatorType}/{creatorId}/badge-requests

GET /v2/challenge-participations

DELETE /v2/challenge-participations/{challengeId}

GET /v2/challenge-participations/{challengeId}