Workspaces
Workspace CRUD, membership, domains, and workspace-level settings.
List workspaces for current user
Returns workspaces visible to the authenticated user with pagination metadata.
Create workspace
Creates a new workspace and assigns the creator as an administrator.
Get workspace by id
Returns details for a single workspace.
Update workspace
Updates mutable workspace fields.
Delete workspace
Deletes a workspace if the caller has sufficient permissions.
List workspace members
Lists members and invitation-backed members for the workspace.
Add or invite workspace member
Adds an existing user or creates/updates an invitation for the provided email.
Update member role
Changes the role of an existing workspace member.
Remove workspace member
Removes a user from the workspace membership list.
List pending workspace invitations
Returns unaccepted invitations for the workspace. The invitation `token` is a bearer secret and is never returned by this endpoint.
Cancel a pending workspace invitation
Deletes a pending invitation (accepted_at IS NULL) and emits an INVITATION_CANCELLED audit event. Does not touch invitations that have already been accepted.
Transfer token ownership between workspaces
Moves tokens from one workspace to another workspace within the same account scope.
List auto-sync configs
<span class='tt-deployment-badge tt-deployment-badge--selfhosted'>Self-hosted / Enterprise only</span> Lists auto-sync configurations for a workspace. TokenTimer Cloud does not offer auto-sync (this route returns 404); credentials are never stored there.
Create auto-sync config
<span class='tt-deployment-badge tt-deployment-badge--selfhosted'>Self-hosted / Enterprise only</span> Creates a new provider auto-sync configuration for a workspace. TokenTimer Cloud does not offer auto-sync (this route returns 404); credentials are never stored there.
Update auto-sync config
<span class='tt-deployment-badge tt-deployment-badge--selfhosted'>Self-hosted / Enterprise only</span> Updates an existing auto-sync configuration. TokenTimer Cloud does not offer auto-sync (this route returns 404).
Delete auto-sync config
<span class='tt-deployment-badge tt-deployment-badge--selfhosted'>Self-hosted / Enterprise only</span> Deletes an auto-sync configuration from a workspace (also deletes stored credentials). TokenTimer Cloud does not offer auto-sync (this route returns 404).
Trigger auto-sync run
<span class='tt-deployment-badge tt-deployment-badge--selfhosted'>Self-hosted / Enterprise only</span> Queues an immediate run for an enabled auto-sync configuration. TokenTimer Cloud does not offer auto-sync (this route returns 404).
Control Center dashboard stats
Returns aggregated Control Center statistics for the workspace dashboard. Requires workspace admin or workspace manager role.
List workspace contacts
Returns contact records for the workspace.
Create workspace contact
Creates a workspace contact with email and/or phone details.
Update workspace contact
Updates mutable fields of a workspace contact.
Delete workspace contact
Deletes a contact from the workspace.
List endpoint monitors
Lists endpoint monitoring configurations for a workspace.
Create endpoint monitor
Creates a domain monitor and optionally links an auto-created token.
Update endpoint monitor
Updates endpoint monitor settings such as check interval and enablement.
Delete endpoint monitor
Removes a domain monitor from the workspace.
Run endpoint health check now
Executes an immediate health check for a monitored endpoint.
Discover subdomains for a root domain
Runs passive subdomain discovery with subfinder's default behavior for publicly known hostnames under the given root domain.
Import selected hostnames from domain checker results
Fetches the live TLS certificate for each selected hostname, then creates ssl_cert tokens in the workspace.
Reassign tokens between contact groups
Moves token contact_group_id values from one group to another in the workspace.