Skip to Content
SeyloDocs
API referencePeople

Change a person's name or email

POST
/api/v1/users.update

Changes another account's display name or email. CONFLICT when the email is taken.

Needs users.manage, which owners and admins hold. Not available to MCP clients or the assistant.

Authorization

cookieseylo_session<token>

Request Body

application/json
  1. body
userId*string

Panel-issued id.

Match^[a-z0-9]{16}$
name?string
Lengthlength <= 80
email?string
Formatemail
Lengthlength <= 254

Response Body

Success.

application/json
  1. response
id*string

Panel-issued id.

Match^[a-z0-9]{16}$
email*string
Formatemail
Lengthlength <= 254
name*string
role*||

owner and admin may do everything; members only what their grants allow.

status*string|string
twoFactor*boolean
passkeyCount*integer
Range0 <= value
githubLogin*string|null
grantCount*integer
Range0 <= value
lastLoginAt*|null
createdAt*string
Formatdate-time
Example Request
curl -X POST 'https://example.com/api/v1/users.update' \  -H 'Content-Type: application/json' \  -d '{  "userId": "string"}'
Example Response
{  "id": "string",  "email": "[email protected]",  "name": "string",  "role": "owner",  "status": "active",  "twoFactor": true,  "passkeyCount": 0,  "githubLogin": "string",  "grantCount": 0,  "lastLoginAt": "2019-08-24T14:15:22Z",  "createdAt": "2019-08-24T14:15:22Z"}

Remove a person POST

Deletes an account with its sessions, second factors, API keys and grants. The audit log keeps its entries. The caller repeats the email to confirm. Needs `users.manage`, which owners and admins hold. Not available to MCP clients or the assistant.

Change a person's role POST

Makes someone an owner, admin or member. Owners and admins can do everything; members keep their grants and can only do what those allow. Only owners touch owner roles. A promotion (to admin, or to owner) from a browser session needs a sign-in or auth.reauth from the last 15 minutes (FORBIDDEN details.reason "reauth" otherwise); API keys need none. Needs `users.manage`, which owners and admins hold. Not available to MCP clients or the assistant.