Organizations

Organization creation and settings

📄️Create a new organization

Creates a new organization, makes the caller its OWNER, and returns a session scoped to the new org. Any authenticated user may create an organization; it is always created for the caller (the owner is taken from the access token, never from the request body). A slug freed by a previously deleted organization may be claimed again.

📄️Update the organization profile

Updates the organization's name, URL slug and/or logo. **Owner only** — an admin is refused with 403 FORBIDDEN. Standard PATCH semantics: an omitted field is left untouched, and `logoUrl` accepts `null` (or an empty string) to clear the logo.

📄️Delete an organization

Permanently deletes the organization. **Owner only** — an admin is refused with 403 FORBIDDEN. The request body must repeat the organization slug as an explicit confirmation; a mismatch is a 422 VALIDATION_ERROR.

📄️Upload the organization logo

Stores an uploaded image as the organization's logo and points `logoUrl` at its public URL. **Owner only.**

📄️Clear the organization logo

Removes the organization's logo. **Owner only.** An uploaded image is retired at the same time, so its public URL stops resolving.

📄️List organization parameters

Returns the organization's own parameters — the values a config-as-code manifest references as `${param:KEY}`. Secret parameters are listed without their value; there is no endpoint that returns one. Admin only.

📄️Get an organization parameter

Returns one parameter. A secret parameter comes back as key, flag and timestamp, with no value. Admin only.

📄️Create or rotate an organization parameter

Creates the parameter, or replaces its value (rotation — the key and every `${param:KEY}` reference to it are unchanged). Keys must match `^[a-z][a-z0-9_.-]{0,63}$`. Only the `sp.` prefix is refused (400); it is reserved for SolidPing. No other name is forbidden: an organization's parameters are stored in a namespace of their own, so a key can never collide with, overwrite or read SolidPing's per-organization configuration — even when it is spelled the same. Admin only.