Pistis
API referencePeople and roles

Delete a role

DELETE
/admin/api/roles/{roleId}

Needs People & roles. Refused while anyone has it or an admission rule gives it (409, naming them); Admin and Member never (400).

Authorization

bearer
headerAuthorizationBearer <token>

An API token

Path Parameters

roleId*string

A role id

Response Body

Deleted, or already gone

Example Request
curl -X DELETE 'http://127.0.0.1:7777/admin/api/roles/auditor'
Example Response
Empty

Rename a role or change its permissions PATCH

Needs People & roles. Admin can't change; Member keeps its name. Holders get the new permissions on their next request.

Protected resource metadata for /mcp (RFC 9728) GET

Names `/mcp` as the resource and this server as its authorization server. Also at `/.well-known/oauth-protected-resource`. No token.