Skip to content

What staff did

GET
/staff/actions
curl --request GET \
--url https://api.sloose.com/staff/actions \
--header 'Authorization: Bearer <token>'

Backoffice route: a staff session, or ADMIN_TOKEN. The newest hundred staff actions: who, what, to which org or person, and why when a reason was given.

orgId

Only actions on this org.

string

Only actions on this org.

Newest first.

Media typeapplication/json
object
actions
required
Array<object>
object
id
required
string
action
required
string
orgId
required
string | null
orgName
required
string | null
staffUserId
required

Null when the admin token acted.

string | null
staffEmail
required
string | null
targetUserId
required
string | null
targetEmail
required
string | null
reason
required
string | null
detail
required
object | null
createdAt
required
string
Examplegenerated
{
"actions": [
{
"id": "example",
"action": "example",
"orgId": "example",
"orgName": "example",
"staffUserId": "example",
"staffEmail": "example",
"targetUserId": "example",
"targetEmail": "example",
"reason": "example",
"detail": "example",
"createdAt": "example"
}
]
}

A bearer that is neither the token nor a live session (code: AUTH_REQUIRED).

Media typeapplication/json

The error envelope every non-2xx answer uses.

object
error
required

Human-readable explanation.

string
code

Machine-readable reason. Absent on a few legacy 400s.

string
key
additional properties
Examplegenerated
{
"error": "example",
"code": "example"
}

A customer’s session, an API token, or no bearer at all — not staff, and not the ADMIN_TOKEN (code: ADMIN_REQUIRED).

Media typeapplication/json

The error envelope every non-2xx answer uses.

object
error
required

Human-readable explanation.

string
code

Machine-readable reason. Absent on a few legacy 400s.

string
key
additional properties
Examplegenerated
{
"error": "example",
"code": "example"
}