Flux Pass admin API: users, entitlements, stats

All admin endpoints require either:

An x-internal-secret header matching the server’s INTERNAL_SECRET environment variable, or
A Bearer token from a user with accessFlags.isNullDropTeam = true and nullDropTeamRole of founder or dev

List users

GET /api/admin/users

Returns a paginated list of all users with their DROP service entitlements.

number

Page number. Defaults to 1.

number

Users per page. Defaults to 50.

Response `200`

{
  "users": [
    {
      "id": "cuid_abc123",
      "email": "user@example.com",
      "displayName": "John",
      "avatar": "cuid_abc123/avatar_1717596600.png",
      "createdAt": "2026-01-15T10:30:00.000Z",
      "updatedAt": "2026-06-05T14:30:00.000Z",
      "serviceAccess": {
        "tier": "pro",
        "isPremium": true,
        "accessFlags": {},
        "metadata": {},
        "customStorageLimit": null,
        "customApiKeyLimit": null
      }
    }
  ],
  "pagination": {
    "page": 1,
    "limit": 50,
    "totalCount": 1842,
    "totalPages": 37,
    "hasMore": true
  }
}

Get user stats

GET /api/admin/users/stats

Returns aggregate user statistics for the platform.

Response `200`

{
  "totalUsers": 1842,
  "premiumUsers": 156,
  "freeUsers": 1686
}

Update user service

PATCH /api/admin/users/{userId}

Updates or creates a service entitlement for a specific user. All changes are recorded in the audit log.

string

required

The target user’s ID.

string

required

Service identifier (e.g., DROP).

string

Service tier (e.g., free, pro-lite, pro, enterprise).

boolean

Whether the user has premium access.

object

Custom access flags (e.g., { "isNullDropTeam": true, "nullDropTeamRole": "dev" }).

object

Arbitrary metadata.

number

Custom storage limit override in bytes.

number

Custom API key limit override.

Example request

{
  "service": "DROP",
  "tier": "pro",
  "isPremium": true,
  "accessFlags": {
    "isNullDropTeam": false
  }
}

Response `200`

{
  "entitlement": {
    "id": "ent_abc123",
    "userId": "cuid_target",
    "service": "DROP",
    "tier": "pro",
    "isPremium": true,
    ...
  }
}

Response `404`

{
  "message": "User not found"
}

Overview

Authentication

User management

Payments

Platform

Flux Pass admin API: users, entitlements, stats

List users

Response `200`

Get user stats

Response `200`

Update user service

Response `200`

Response `404`

​List users

​Response 200

​Get user stats

​Response 200

​Update user service

​Response 200

​Response 404

List users

Response `200`

Get user stats

Response `200`

Update user service

Response `200`

Response `404`