Admin Operations

The admin flow is the admin role in apps/web and the corresponding admin routes in apps/api.

Current Responsibilities

• approve merchant users
• search users
• review tenant detail
• freeze or unfreeze wallets
• make manual wallet adjustments
• inspect immutable audit logs

Backend Routes Used

• GET /api/v1/admin/users/search
• PATCH /api/v1/admin/users/:userId/approve
• PATCH /api/v1/admin/users/:userId/role
• GET /api/v1/admin/tenants
• GET /api/v1/admin/tenants/:tenantId
• POST /api/v1/admin/wallets/:walletId/freeze
• POST /api/v1/admin/wallets/:walletId/unfreeze
• POST /api/v1/admin/wallets/:walletId/adjust
• GET /api/v1/admin/audit-logs

Safety Rules

• every admin action must write an audit log
• wallet adjustments must stay consistent with the ledger
• approval must keep the merchant workspace flow idempotent
• admin access still requires the approved email domain check