Registry API
Users and service accounts
Read the signed-in user, manage roles and issue service-account tokens.
A service account is a non-human, org-scoped identity that authenticates with a wl_ token and has a role (ci:agent by default). Use one for CI instead of a person’s token.
Operations
| Request | What it does |
|---|---|
| GET /api/me | Get the signed-in user |
| GET /api/users | List users |
| PATCH /api/users/{id}/role | Change a user’s role |
| POST /api/service-accounts | Create a service account and token |
| GET /api/service-accounts | List service accounts |
| DELETE /api/service-accounts/{id} | Delete a service account |
Operations are exactly those in the committed OpenAPI document (packages/workloom-api/openapi.json), which matches the route definitions; this site checks its list against both. Paths are under the API host. Public, approved packages and profiles can be read without a token; everything else needs one.