/
TR
trends
Search skmtc…
⌘K
Docs
Sign in
Docs
History
Schema
Generate
Filter operations
get
/.well-known/jwks.json
Endpoint: oidc.keys
get
/.well-known/openid-configuration
Endpoint: oidc.discovery
patch
/api/v1/account/profile
Update the caller's shared ``name`` and/or ``institution`` only.
get
/api/v1/admin/app-access
List per-application access grants.
get
/api/v1/admin/app-access/apps
List the gated applications and their role vocabularies.
put
/api/v1/admin/app-access/apps/{app_key}/notification-recipients
Replace the access-request notification list for *app_key*.
get
/api/v1/admin/client-stats
Get aggregated client platform usage statistics.
post
/api/v1/admin/news
Create a new news item.
delete
/api/v1/admin/news/{news_id}
Delete a news item.
put
/api/v1/admin/news/{news_id}/translations
Update translations for a news item.
delete
/api/v1/admin/news/{news_id}/translations/{lang}
Delete a specific translation for a news item.
post
/api/v1/admin/oidc-clients
Register an OIDC client; only API administrators may provision clients.
get
/api/v1/admin/users/{subject}
Endpoint: oidc.admin_user_lookup
post
/api/v1/admin/users/{user_id}/app-access
Grant, update, or revoke a user's access to a gated application.
delete
/api/v1/admin/users/{user_id}/app-access/{app_key}
Revoke a user's access to a gated application.
get
/api/v1/apps/{app_key}/me
Return the caller's profile and effective access to *app_key*.
get
/api/v1/apps/{app_key}/users
Exact-email lookup or the application user directory.
post
/api/v1/apps/{app_key}/users/resolve
Resolve up to 100 subjects to application profiles.
put
/api/v1/apps/{app_key}/users/{subject}/access
Approve, revoke, or change the role of *subject* (administrators only).
post
/api/v1/bulk-email
Create a draft bulk email.
get
/api/v1/bulk-email/config
Return bulk email config (max_recipients, from_email) for superadmins.
post
/api/v1/bulk-email/recipient-list
Create a named recipient list from filter criteria.
post
/api/v1/bulk-email/recipient-list/preview
Preview users matching filter criteria without saving.
patch
/api/v1/bulk-email/recipient-list/{list_id}
Update an existing saved recipient list.
delete
/api/v1/bulk-email/{bulk_email_id}
Delete a draft bulk email.
post
/api/v1/bulk-email/{bulk_email_id}/restore-draft
Restore a SENT or FAILED bulk email back to DRAFT status.
post
/api/v1/bulk-email/{bulk_email_id}/send
Send a bulk email.
post
/api/v1/bulk-email/{bulk_email_id}/send-test
Send bulk email as test to superadmins only (no 2FA, status unchanged).
post
/api/v1/bulk-email/{bulk_email_id}/send-test-self
Send bulk email as test to the requesting user only (no 2FA, status unchanged).
post
/api/v1/bulk-email/{bulk_email_id}/send-verification
Generate and email a 6-digit OTP to the caller for this bulk email.
get
/api/v1/data/boundaries
Get administrative boundary metadata with download URLs.
get
/api/v1/data/boundaries/last-updated
Get the most recent modification timestamp across all boundaries.
get
/api/v1/data/boundaries/list
Get hierarchical list of all boundaries with ADM1 nested under ADM0.
get
/api/v1/execution
Retrieve all executions with admin filtering and cross-user visibility.
get
/api/v1/execution/export
Export executions as a CSV file (admin only).
get
/api/v1/execution/user
Retrieve executions for the current authenticated user.
patch
/api/v1/execution/{execution}
Update an execution's properties (admin only).
get
/api/v1/execution/{execution}/batch-logs
Retrieve AWS Batch (CloudWatch) logs for a specific execution.
patch
/api/v1/execution/{execution}/callback
Update only the execution identified by an execution-bound credential.
post
/api/v1/execution/{execution}/callback/log
Append a log only to the credential's execution.
post
/api/v1/execution/{execution}/cancel
Cancel a running execution and any associated Google Earth Engine tasks.
get
/api/v1/execution/{execution}/docker-logs
Retrieve Docker service logs for a specific execution.
get
/api/v1/execution/{execution}/download-results
Download execution results as a JSON file.
post
/api/v1/execution/{execution}/log
Create a log entry for a specific execution (admin only).
post
/api/v1/gee-oauth/callback
Complete GEE OAuth flow without requiring a JWT — for clients (e.g. the QGIS
get
/api/v1/google-groups/info
Retrieve public information about available Google Groups.
get
/api/v1/news
Retrieve news items for display in clients.
get
/api/v1/news/{news_id}
Retrieve a single news item by ID.
get
/api/v1/oauth/clients
List the caller's active (non-revoked) service clients.
delete
/api/v1/oauth/clients/{client_db_id}
Revoke a service client by its database UUID.
post
/api/v1/oauth/token
Exchange client credentials for a short-lived access token.
get
/api/v1/rate-limit/events
Retrieve historical rate limit breach events for auditing.
post
/api/v1/rate-limit/reset
Reset all rate limits across the system.
post
/api/v1/rate-limit/reset/{identifier}
Reset a specific rate limit by its identifier.
get
/api/v1/rate-limit/status
Query current rate limiting status across the system.
get
/api/v1/script
Retrieve all scripts with flexible filtering, sorting, and pagination.
get
/api/v1/script/export
Export scripts as a CSV file (admin only).
delete
/api/v1/script/{script_id}/access
Remove all access restrictions from a script.
put
/api/v1/script/{script_id}/access/app
Allow users with an active application grant to access a script.
put
/api/v1/script/{script_id}/access/roles
Set role-based access control for a script.
delete
/api/v1/script/{script_id}/access/roles/{role}
Remove a specific role from script access control list.
put
/api/v1/script/{script_id}/access/users
Set user-specific access control for a script.
delete
/api/v1/script/{script_id}/access/users/{user_id}
Remove a specific user from script access control list.
delete
/api/v1/script/{script}
Permanently delete a script and all associated data.
patch
/api/v1/script/{script}/config
Update script metadata without uploading a new script archive.
get
/api/v1/script/{script}/download
Download a script's source code and files as a compressed archive.
get
/api/v1/script/{script}/log
Retrieve processing and validation logs for a specific script.
post
/api/v1/script/{script}/publish
Publish a script to make it available for execution.
post
/api/v1/script/{script}/run
Execute a script with provided parameters.
post
/api/v1/script/{script}/unpublish
Unpublish a script to make it unavailable for new executions.
delete
/api/v1/stats/cache
Clear the stats cache.
get
/api/v1/stats/dashboard
Get comprehensive dashboard statistics.
get
/api/v1/stats/executions
Get execution statistics and trends.
get
/api/v1/stats/health
Get basic health check for stats endpoints.
get
/api/v1/stats/users
Get user statistics and geographical distribution.
get
/api/v1/status
Retrieve system status logs for monitoring and diagnostics.
get
/api/v1/status/cluster
Get cluster status (orchestrator-agnostic alias for /status/swarm).
get
/api/v1/status/swarm
Get cached Docker Swarm cluster status including comprehensive node information.
patch
/api/v1/unsubscribe
Update the email subscription preferences for a tokenised user.
get
/api/v1/user
Retrieve list of users with filtering, sorting, and pagination.
get
/api/v1/user/export
Export users as a CSV file (admin only).
delete
/api/v1/user/me
Delete current user's account and all associated data.
get
/api/v1/user/me/app-access
List the caller's own application grants and pending requests.
post
/api/v1/user/me/app-access/{app_key}
Request access to a gated application.
patch
/api/v1/user/me/change-password
Change current user's password with old password verification.
get
/api/v1/user/me/clients
Get current user's client platform metadata.
delete
/api/v1/user/me/gee-credentials
Delete current user's Google Earth Engine credentials.
patch
/api/v1/user/me/gee-credentials/project
Save the user's selected GEE Cloud Project ID and grant bucket write access.
post
/api/v1/user/me/gee-credentials/test
Test current user's Google Earth Engine credentials.
post
/api/v1/user/me/gee-oauth/callback
Complete OAuth flow and store Google Earth Engine credentials.
post
/api/v1/user/me/gee-oauth/initiate
Initiate OAuth flow for Google Earth Engine authentication.
post
/api/v1/user/me/gee-service-account
Upload Google Earth Engine service account credentials.
put
/api/v1/user/me/google-groups
Update current user's Google Groups preferences and trigger synchronization.
post
/api/v1/user/me/google-groups/sync
Manually trigger synchronization of user's Google Groups memberships.
delete
/api/v1/user/me/openeo-credentials
Remove the current user's stored openEO credentials.
get
/api/v1/user/me/openeo-credentials/check
Validate the current user's stored openEO credentials against the backend.
delete
/api/v1/user/me/sessions
Revoke all authentication sessions for current user (logout everywhere).
delete
/api/v1/user/me/sessions/{session_id}
Revoke a specific authentication session.
post
/api/v1/user/reset-password
Reset password using a secure token from password recovery email.
delete
/api/v1/user/{user_id}/gee-credentials
Delete another user's Google Earth Engine credentials (Admin only).
get
/oauth/forgot-password
Hosted password-reset request that returns the user to the client's sign-in.
Copy
Copy Markdown
Copy Markdown
Copying…
Copied
Copy failed
Changes to Hosted password-reset request that returns the user to the client's sign-in.
get
/oauth/forgot-password
Sep 30, 2026
22a222adfcea
Revision changes
info
endpoint added