Reference / generated / browser session
The browser control plane, without guesswork.
These routes power the Wildflower console. They use the opaque wildflower_session cookie instead of project API keys and are intentionally excluded from the generated SDK surface.
36operations
11session reads
25CSRF-protected mutations
Authentication boundary
Browser sessions are same-origin and cookie-backed. Mutations also require the X-Wildflower-Csrf header. Project API keys and generated SDK clients must use the public sandbox API instead.
Operations
POST
/v1/auth/session/refreshRotate the browser sessionX-Wildflower-Csrf requiredPOST/v1/auth/logoutLog out the browser sessionX-Wildflower-Csrf requiredGET/v1/meGet the authenticated browser userSession cookie onlyDELETE/v1/meDelete the authenticated userX-Wildflower-Csrf requiredGET/v1/accountsList accessible accountsSession cookie onlyPOST/v1/accountsCreate an organizationX-Wildflower-Csrf requiredGET/v1/accounts/{accountId}Get an accessible accountSession cookie onlyPATCH/v1/accounts/{accountId}Update an accountX-Wildflower-Csrf requiredDELETE/v1/accounts/{accountId}Delete an organizationX-Wildflower-Csrf requiredGET/v1/accounts/{accountId}/membersList account membersSession cookie onlyPATCH/v1/accounts/{accountId}/members/{userId}Change an account member roleX-Wildflower-Csrf requiredDELETE/v1/accounts/{accountId}/members/{userId}Remove an account memberX-Wildflower-Csrf requiredPOST/v1/accounts/{accountId}/leaveLeave an organizationX-Wildflower-Csrf requiredGET/v1/accounts/{accountId}/projectsList accessible projects in an accountSession cookie onlyPOST/v1/accounts/{accountId}/projectsCreate a project in an accountX-Wildflower-Csrf requiredGET/v1/accounts/{accountId}/invitationsList pending organization invitationsSession cookie onlyPOST/v1/accounts/{accountId}/invitationsInvite a person to an organizationX-Wildflower-Csrf requiredDELETE/v1/accounts/{accountId}/invitations/{invitationId}Revoke a pending organization invitationX-Wildflower-Csrf requiredPOST/v1/accounts/{accountId}/invitations/{invitationId}/resendRotate and resend a pending organization invitationX-Wildflower-Csrf requiredGET/v1/invitationsList invitations matching the signed-in user's verified identitiesSession cookie onlyPOST/v1/invitations/{invitationId}/acceptAccept an organization invitationX-Wildflower-Csrf requiredPOST/v1/invitations/{invitationId}/declineDecline an organization invitationX-Wildflower-Csrf requiredGET/v1/projectsList owned projectsSession cookie onlyPOST/v1/projects/{projectId}/transferTransfer a personal project to an organizationX-Wildflower-Csrf requiredGET/v1/projects/{projectId}/membersList effective project membersSession cookie onlyPOST/v1/projects/{projectId}/membersAdd a project memberX-Wildflower-Csrf requiredPATCH/v1/projects/{projectId}/members/{userId}Change a project member roleX-Wildflower-Csrf requiredDELETE/v1/projects/{projectId}/members/{userId}Remove an explicit project memberX-Wildflower-Csrf requiredGET/v1/projects/{projectId}/api-keysList project API keysSession cookie onlyPOST/v1/projects/{projectId}/api-keysCreate a project API keyX-Wildflower-Csrf requiredDELETE/v1/projects/{projectId}/api-keys/{keyId}Revoke a project API keyX-Wildflower-Csrf requiredPOST/v1/legal/acceptancesAccept current legal documentsX-Wildflower-Csrf requiredPOST/v1/legal/notifications/{notificationId}/seenMark a legal notice as seenX-Wildflower-Csrf requiredPOST/v1/legal/consentsRecord or withdraw optional consentX-Wildflower-Csrf requiredGET/v1/accounts/{accountId}/legalGet organization agreement stateSession cookie onlyPOST/v1/accounts/{accountId}/legal/agreementsAccept the release for an organizationX-Wildflower-Csrf required