Public REST API

For REST scripting, use the same Authorization: Bearer token for JSON routes and for member media URLs returned in responses. Fetch parents before children so foreign keys resolve when you import elsewhere.

1. Account shell: Systems, Terminology, Appearance, Billing / Subscriptions
2. Structure: Groups & folders (list + tree); per group, Group layout
3. Members: Members list (repeat with sideSystemId / subSystemId when using side or sub-systems)
4. Per member: Custom fields; Member statuses assignments
5. Notes (entries): Entries — at most 100 rows per list call. For large libraries, use GET /api/v1/entries?memberId={uuid}&limit=100 per member, or Search /catalog then GET /api/v1/entries/{entryId}
6. Front: Front — current state, then paginate GET /api/v1/front/history until nextCursor is null
7. Privacy & social: Privacy buckets, Friends, Social profile, then Guestbook & poll per widget
8. Messaging: Messaging — /bootstrap, then paginate channel messages with nextCursor
9. Operational extras: Activity, Import runs
10. Trash (optional): Trash for soft-deleted items before purge
11. Binary media: GET /api/v1/members/{memberId}/media?kind=avatar|background with URLs and v from member JSON

Response bodies

Success JSON is returned directly in the response body (no envelope wrapper). Reference pages document example JSON per endpoint. Shared errors: Errors.