​
Admin API Overview

Allternit’s Admin API gives organization owners and admins programmatic control over the control plane. Every endpoint is scoped to an organization and requires an admin or owner role.

​
Base URL

​
Areas

  • Workspaces — create workspaces, invite members, manage roles, and configure IP allowlists.
  • RBAC — custom roles, groups, and group membership.
  • Service accounts — scoped API keys for automation.
  • Access tokens — organization access tokens for CLI and headless surfaces.
  • Spend limits — monthly caps, increase requests, and balance checks.
  • MCP tunnels — secure MCP server ingress with mTLS and OAuth.
  • Analytics — cost, token, and request volume reports.
  • Inference hooks — pre/post middleware for every LLM request.
  • External keys — BYO KMS and CMEK configuration.
  • User profiles — enrollment URLs and consent tracking.
  • Federation — external identity issuer rules and claim-to-role mapping.
  • Outcome rubrics — eval scoring criteria.
  • Eval — datasets and runs for agent evaluation.
  • Fallback credits — credit policy and reconciliation.

​
Authentication

Use a service-account or admin API key in the Authorization: Bearer <token> header. See Authentication.

​
Organization scoping

All admin endpoints require the caller to be a member of an organization with role owner or admin. Calls from users without an organization, or from members with only the member role, return 403 Forbidden.