Users
The public API has no /v1/users routes. Manage users, invitations, and roles in the Flint dashboard.
API keys are merchant-scoped machine credentials, not user credentials. A key authenticates as the merchant, and its permissions come from the key's scopes. The user who created a key appears on the key as audit metadata; it does not affect what the key can do.
What This Means For External Integrations#
- API keys authenticate as the merchant, with access controlled by key scopes
- The key creator is audit metadata, not the authorization subject
- No public
/v1route reads or writes user profiles - User management happens in the dashboard