API referencePeople
Remove a person
POST
Deletes an account with its sessions, second factors, API keys and grants. The audit log keeps its entries. The caller repeats the email to confirm.
Needs users.manage, which owners and admins hold. Not available to MCP clients or the assistant.
cookie
seylo_session<token>application/json- body
userId*stringPanel-issued id.
Match
^[a-z0-9]{16}$confirmEmail*stringMust equal the account's email.
Length
length <= 254Success.
application/json- response
curl -X POST 'https://example.com/api/v1/users.remove' \ -H 'Content-Type: application/json' \ -d '{ "userId": "string", "confirmEmail": "string"}'Example Response
{}List people GET
Lists every account on the panel with role, status, 2FA and last sign-in, owners first, then by email. Needs `users.view`, which owners and admins hold. Available to MCP clients and the assistant.
Change a person's name or email POST
Changes another account's display name or email. CONFLICT when the email is taken. Needs `users.manage`, which owners and admins hold. Not available to MCP clients or the assistant.