Skip to content

Wellesley Platform API (1.0)

Download OpenAPI description
openapi.json
openapi.yaml
Languages
Servers
Mock server
https://docs.wellesley.social/_mock/openapi/
Simple setup, all in one. Digital Ocean
https://dust.allroads.social/
Simple setup, db is separate. Digital Ocean
https://meteor.allroads.social/

AI Agents

Assign and list group AI agent assignments

Operations

Accounts

Account management and authentication endpoints. Handles user registration, login flows (email/phone), profile management, and account lifecycle operations. Supports multi-step signup with email/SMS verification, CAPTCHA, and optional admin approval.

Operations

ActivityPub

WebFinger endpoint for ActivityPub user discovery and federation

Addresses

Endpoints for suggesting and validating physical addresses

Operations

Admin

Development and testing endpoints for populating the database with test data

Admin Accounts

Administrative endpoints for account and user management. Provides comprehensive tools for managing user accounts, including creation, deletion, role assignment, password management, state changes, and user impersonation for bot accounts.

Operations

Create a new user under an existing account

Request

Creates a new user profile under an existing account. The user will have a unique username within the account's domain. This endpoint validates that the username is not reserved, the username doesn't already exist, and the associated account exists. Returns the created user information.

RBAC: requires Users.Manage

Query
account_idstring(TypeId)

Account id to add user to

Example: account_id=us_01hxcvk1hjexere4pvtrj0ymqq
htmlContentany

Returns text as html if true or original text if false. Applicable only to local posts and users. Default is true.

Bodyapplication/jsonrequired

JSON object with the user's data

usernamestringrequired

Username

Example: "john_smith"
displayNamestring\Srequired

Display Name

Example: "John Smith"
summarystring or null<= 1024 characters

User's bio

Example: "I work in IT"
avatarIdstring or null

Avatar upload id or null to remove

Example: "us_01hxcvk1hjexere4pvtrj0ymqq"
headerIdstring or null

Header upload id or null to remove

Example: "us_01hxcvk1hjexere4pvtrj0ymqq"
actorTypestring or null

Types that an Actor can be assigned. Coincide with ActivityPub Actor types:

  • APPLICATION: Apps will have this type
  • GROUP: Interest Groups and Generic Groups wil have this type
  • ORGANIZATION: Formal Organizations such as Companies, Institutions, etc. will have this type
  • PERSON: Individual people will have this type
  • SERVICE: Bots, Services, and other automated tools which are not also Apps will have this type
Enum"Application""Group""Organization""Person""Service"
Example: "USER"
channelboolean

Whether this user is a channel

Example: false
curl -i -X POST \
  'https://docs.wellesley.social/_mock/openapi/api/v1/admin/create-user?account_id=us_01hxcvk1hjexere4pvtrj0ymqq' \
  -H 'Content-Type: application/json' \
  -d '{
    "username": "john_smith",
    "displayName": "John Smith",
    "summary": "I work in IT",
    "avatarId": "us_01hxcvk1hjexere4pvtrj0ymqq",
    "headerId": "us_01hxcvk1hjexere4pvtrj0ymqq",
    "actorType": "USER",
    "channel": false
  }'

Responses

User successfully created under existing account

Bodyapplication/json
groupUserNamestring or null

Name of the channel inside a group

idstringrequired

internal id of this user

Example: "us_01hxcvk1hjexere4pvtrj0ymqq"
usernamestringrequired

unique user name

Example: "john_smith"
domainstringrequired

user's domain, remote only, empty for local

Example: "wlsly1.net"
displayNamestringrequired

full name of the user

Example: "John Smith"
summarystringrequired

User's summary or bio

Example: "Pixels are my paint, code is my canvas, creativity is my brush."
uristring(uri)required

URI of this user

Example: "https://wlsly1.net/users/john_smith"
statsobjectrequired

User stats

stats.​postsinteger(int32)required

number of posts

stats.​followersinteger(int32)required

number of followers

stats.​followinginteger(int32)required

number of following

stats.​followingHiddenbooleanrequired

privacy setting to hide followings

stats.​totalStorageBytesinteger(int64)required

total storage volume in bytes

stats.​commentsinteger(int32)required

number of comments

fieldsobjectrequired

User fields

fields.​property name*object(UserField)additional property
avatarobject or null

User's avatar

headerobject or null

User's header

createdAtstring(date-time)(Instant)required
Example: "2022-03-10T16:15:50Z"
deletedboolean or null
statestringrequired

Registration mode:

  • REGULAR - just regular state
  • SENSITIVE - all media attachments are flagged as sensitive, i.e. all user's posts should be marked as sensitive, old posts and all future ones.
  • LIMITED - all user's old and future posts should be set maximum to followers only unless user set it to direct himself. non-followers should not be notified, i.e. if user mentions non-follower we do not create notification.
  • SUSPENDED - User can login, but cannot do anything in his account except to read, cannot change anything, cannot create new posts or comments etc. All his posts are marked as deleted, but we do not delete them just yet. User is scheduled to be deleted in one month. During this month it is possible to restore it via admin.
Enum"REGULAR""SENSITIVE""LIMITED""SUSPENDED"
relationshipobject or null

Relationship with this user

emojisArray of objects or null(Emoji)
locationobject or null

User's location, geo and name

timezoneobject or null

User's timezone

birthdayobject or null

User's birthday

softwarestringrequired

Software platform type (wellesley, mastodon, threads.net)

Example: "wellesley"
channelboolean

is channel user

groupIdstring or null

UUID with type prefix

Example: "us_01hxcvk1hjexere4pvtrj0ymqq"
groupPrivacystring or null
  • PUBLIC - Channel is visible to everyone and can be followed by anyone.
  • PRIVATE - Channel is visible only to group members and can only be followed by group members.
Enum"PUBLIC""PRIVATE"
groupMainboolean or null
groupDefaultboolean or null
actorTypestring or null

Types that an Actor can be assigned. Coincide with ActivityPub Actor types:

  • APPLICATION: Apps will have this type
  • GROUP: Interest Groups and Generic Groups wil have this type
  • ORGANIZATION: Formal Organizations such as Companies, Institutions, etc. will have this type
  • PERSON: Individual people will have this type
  • SERVICE: Bots, Services, and other automated tools which are not also Apps will have this type
Enum"Application""Group""Organization""Person""Service"
Response
application/json
{
  "groupUserName": "string",
  "id": "us_01hxcvk1hjexere4pvtrj0ymqq",
  "username": "john_smith",
  "domain": "wlsly1.net",
  "displayName": "John Smith",
  "summary": "Pixels are my paint, code is my canvas, creativity is my brush.",
  "uri": "https://wlsly1.net/users/john_smith",
  "stats": {
    "posts": 0,
    "followers": 0,
    "following": 0,
    "followingHidden": true,
    "totalStorageBytes": 0,
    "comments": 0
  },
  "fields": {
    "property1": { … },
    "property2": { … }
  },
  "avatar": {
    "uploadId": "up_kjhwieuy2387928371",
    "userId": "us_97234khddqdkuhqwij",
    "uploadType": "video",
    "meta": { … },
    "size": 0,
    "files": [ … ],
    "tags": [ … ],
    "error": "string",
    "cached": true,
    "logs": "string",
    "remote": true,
    "createdAt": "2022-03-10T16:15:50Z",
    "updatedAt": "2022-03-10T16:15:50Z"
  },
  "header": {
    "uploadId": "up_kjhwieuy2387928371",
    "userId": "us_97234khddqdkuhqwij",
    "uploadType": "video",
    "meta": { … },
    "size": 0,
    "files": [ … ],
    "tags": [ … ],
    "error": "string",
    "cached": true,
    "logs": "string",
    "remote": true,
    "createdAt": "2022-03-10T16:15:50Z",
    "updatedAt": "2022-03-10T16:15:50Z"
  },
  "createdAt": "2022-03-10T16:15:50Z",
  "deleted": true,
  "state": "REGULAR",
  "relationship": {
    "following": "PENDING",
    "followed": "PENDING",
    "blocked": true,
    "blockedBy": true,
    "muted": { … },
    "note": "string"
  },
  "emojis": [
    { … }
  ],
  "location": {
    "geo": { … },
    "name": "string",
    "autoUpdate": true,
    "show": true
  },
  "timezone": {
    "ianaTimezone": "string",
    "autoUpdate": true,
    "show": true
  },
  "birthday": {
    "date": "2022-03-10T16:15:50Z",
    "show": "NONE"
  },
  "software": "wellesley",
  "channel": true,
  "groupId": "us_01hxcvk1hjexere4pvtrj0ymqq",
  "groupPrivacy": "PUBLIC",
  "groupMain": true,
  "groupDefault": true,
  "actorType": "Application"
}

Delete an account with all associated users

Request

Permanently deletes an account and all its associated users. Can identify the account by email address, account ID, or username. This operation notifies followers on remote servers about the deletion and marks all associated content appropriately. This action is irreversible. Administrators cannot delete their own account through this endpoint.

RBAC: requires Users.Manage

Query
emailstring or null

Email of the account to delete

idstring or null

Id of the account to delete

Example: id=us_01hxcvk1hjexere4pvtrj0ymqq
usernamestring or null

Username of the account to delete

curl -i -X DELETE \
  'https://docs.wellesley.social/_mock/openapi/api/v1/admin/delete?email=string&id=us_01hxcvk1hjexere4pvtrj0ymqq&username=string'

Responses

Account and all associated users successfully deleted

Bodyapplication/json
any
Response
application/json
null

Delete a user

Request

Permanently deletes a user profile. Can identify the user by username or user ID. This operation notifies followers on remote servers about the deletion and marks all associated content appropriately. This action is irreversible. Administrators cannot delete their own user profile through this endpoint.

RBAC: requires Users.Manage

Query
idstring or null

User ID to delete. Must be a valid USER type ID.

Example: id=us_01hxcvk1hjexere4pvtrj0ymqq
usernamestring or null

Username of the user to delete. Case-insensitive.

curl -i -X DELETE \
  'https://docs.wellesley.social/_mock/openapi/api/v1/admin/delete-user?id=us_01hxcvk1hjexere4pvtrj0ymqq&username=string'

Responses

User successfully deleted

Bodytext/plain
Response
No content

Admin ActivityPub

Administrative endpoints for ActivityPub

Operations

Admin Audit

Administrative endpoints for viewing and managing audit logs. Provides comprehensive logging of all security-relevant actions performed in the system.

Operations

Admin Domain Blocks

Administrative APIs for managing domain blocks. Provides endpoints to block specific domains with different severity levels (SUSPEND, LIMIT, NOOP), update existing blocks, unblock domains, and list currently blocked domains. Domain blocks prevent or limit federation with specified domains.

Operations

Admin Domains Allow List

Administrative endpoints for managing domain allowlists. When domain allowlisting is enabled, only domains in this list can federate with the instance.

Operations

Admin Email Allow List

Administrative endpoints for managing email domain allowlist used for registrations.

Operations

Admin Email Blocks

Administrative APIs for managing email blocks to prevent unwanted signups. Supports blocking specific email addresses and entire domains. Email blocks are automatically normalized and checked during user registration.

Operations

Admin Federation Metrics

Administrative endpoints for monitoring and managing federation with other ActivityPub instances. Provides metrics on connected domains, user counts, post statistics, and federation health monitoring.

Operations

Admin Feeds

Administrative endpoints for managing user feeds and cache

Operations

Admin Groups

Administrative endpoints for Groups management

Operations

Admin Init

Administration endpoints for system initialization and updates

Admin Posts

Administrative endpoints for managing posts. Provides moderation capabilities to delete posts that violate community guidelines or are part of reported content.

Operations

Admin Reports

Administrative endpoints for managing user reports and moderation. Provides tools for reviewing, assigning, resolving, and annotating reports about users, posts, and groups. Supports workflow management with assignment, notes, and resolution tracking.

Operations

Admin Signup Requests

Administrative endpoints for managing user signup requests. Provides tools for reviewing, approving, rejecting, and managing signup requests in moderation queue. Supports workflow for manual account approval when enabled.

Operations

Admin Uploads

Administrative endpoints for managing file uploads and media storage. Provides tools for monitoring user storage usage, searching uploaded files, and managing upload processing jobs. Supports queue management for async upload processing workflows.

Operations

Aliases

Endpoints for managing previous usernames and username aliases

Operations

Application Data

Endpoints for managing application-specific data storage. Provides a flexible key-value storage system for applications to store custom data associated with users, groups, or the platform. Supports tagging, filtering, and ownership-based access control.

Operations

Applications

Endpoints for serving and routing platform applications to users

Operations

Blocks

User blocking functionality for preventing interaction with specific users. Blocking a user prevents them from following you, seeing your posts, or interacting with your content. Block operations are federated to remote servers when blocking remote users.

Operations

Categories

Endpoints for managing forum-specific categories

Operations

Domain Blocks

Public API for listing domains blocked by this instance. Visibility and reason details are controlled by platform settings.

Operations

Domain-blocks

Endpoints for managing user-level domain blocks to filter content from specific servers

Operations

Drafts

Endpoints for creating, reading, updating, and deleting drafts, as well as publishing them to posts

Operations

Email

Email address management for user accounts. Provides secure email change workflow with verification codes, password confirmation, and notification system. All email changes require authentication and are logged for security.

Operations

Emoji

Custom emoji management system for the platform. Supports creating, uploading, importing/exporting, searching, and deleting custom emojis. Emojis are automatically resized and optimized. Admin-only operations require Emojis.Manage permission.

Operations

Events

Endpoints for creating, retrieving, and managing events and attendees

Operations

Events ActivityPub

ActivityPub-compatible endpoint for events

Follow

User follow relationship management. Handles following/unfollowing users, managing follow requests, and querying follower/followee relationships. Supports both local and remote (federated) users with ActivityPub protocol integration.

Operations

Forums

Endpoints for managing discussion forums, including creation, retrieval, and deletion

Operations

Geo

Endpoints for geographic location lookup and timezone services

Operations

Group Applications

Endpoints for managing applications available to groups, including listing, adding, and removing group-specific applications

Operations

Group Channels

API endpoints for managing channels within groups. Channels are specialized accounts that enable organized content distribution within groups. They support hierarchical organization with main and default channels, privacy controls inherited from parent groups, and both scoped (group-specific) and global usernames for discovery. Group administrators manage channels while members can follow them.

Operations

Group Member Settings

Endpoints for managing member-specific settings within groups. These settings are personal to each group member and affect their individual experience within the group. Members can only access and modify their own settings within groups they belong to.

Operations

Group Members

API endpoints for managing group membership. Provides functionality to add, update, and remove members from groups, as well as retrieve membership information. Supports both local and federated groups through ActivityPub protocol. Access control is enforced based on group privacy settings and user permissions.

Operations

Group Questions

API endpoints for managing group entry questions. Groups can require prospective members to answer questions before joining. Questions support multiple types (text, single choice, multiple choice) and are used to screen members when the group's join mode is set to QUESTIONS. Answers are validated and generate a token that can be used during the join process.

Operations

Group Reports

Group-scoped moderation reports. Allows group admins to review and resolve reports targeting their channels, forums, and events without global moderator access.

Operations

Group Rules

API endpoints for managing community rules within groups. Rules define the expected conduct and content policies that members must follow. Each rule consists of text (the rule itself), a hint (explanation or context), and an ordering value for display sequence. Rules are scoped to specific groups and can be managed by users with appropriate permissions.

Operations

Group Settings

Endpoints for managing group-specific settings and configuration options. These endpoints allow authorized group members to view, update, and delete settings that control group behavior, features, and customization options.

Operations

Groups

API endpoints for managing groups within the Wellesley platform. Groups are community spaces that can be public or private, support forums, and have their own membership and permission systems. Groups can be federated via ActivityPub for cross-instance communication.

Operations

Import

Endpoints for importing data from other platforms including followers, blocks, and mutes

Operations

Instance

Server instance information and configuration. Provides metadata about the server, compatible domains, supported languages, timezones, and countries. All endpoints are publicly accessible without authentication.

Operations

Invites

Endpoints for sending and managing user invitations

Operations

Jobs

Endpoints for monitoring and managing background job queues, including statistics, job listings, and queue monitoring

Operations

Lists

Endpoints for managing user lists for organizing and grouping followed accounts

Operations

Logins

Endpoints for managing user login methods including email, password, and phone authentication

Operations

Metrics

Endpoints for retrieving metrics and analytics data from the events stream

Operations

Mutes

Endpoints for managing user mutes to hide content from specific users

Operations

Notes

Endpoints for managing personal notes about other users

Operations

Notifications

Endpoints for managing user notifications including retrieving, counting, and marking notifications as read or unread

Operations

Passkeys

Passkey (WebAuthn) registration and authentication

Operations

Password

Endpoints for password management including changing, resetting, and recovering passwords

Operations

Pins

Endpoints for pinning posts to profiles and retrieving pinned posts

Operations

Platform Data

Endpoints for managing platform-wide and group-specific data storage. Unlike application data, this provides direct data management not tied to specific applications. Supports flexible ownership models including platform-level, group-level, and user-level data with appropriate access controls.

Operations

Platform Settings

Endpoints for managing platform-wide settings and configuration options. These endpoints control server-level settings that affect the entire platform, including features, limits, security policies, and default behaviors for all users and groups.

Operations

Polls

Endpoints for interacting with polls, including voting and retrieving results

Operations

Posts

Endpoints for creating, reading, updating, and deleting posts, as well as managing comments, likes, bookmarks, and reposts

Operations

RBAC

Endpoints for retrieving Role-Based Access Control (RBAC) configurations and managing roles, resources, permissions and role-to-user assignments. Scoped Role Definition (RBACRole):

  • Represents roles within the RBAC system.
  • Each role has a unique roleId, a name, an optional description, and a scope.
  • The scope defines the domain or area in which the role is valid.
  • The scope can be Global (hardcoded), currently the only one is "System"
  • The scope also can be dynamic, currently we use Group Ids, like "gr_05hxcvk1hjexere4pvtrj0hggt"
  • Roles come with assigned permissions (RBACPermissions) that define what actions the role can perform on system resources.
  • Metadata such as createdAt and updatedAt timestamps track the role's lifecycle events.

Permissions** (RBACPermissions):

  • Encapsulates resource-specific access controls.
  • Each permission object specifies the resource (e.g., "user", "document") and an associated list of allowed RBACAccess types.
  • RBACAccess enumerates the supported actions: Read, Add, Modify, Delete.

Role Assignments to Actors (RBACActorRole):

  • Maps actors (e.g., users, services) to specific roles.
  • Tracks the association through actorId (representing the unique entity being assigned) and roleId (specific role ID).
  • Includes timestamps to record when the assignment was created or updated.
Operations

Remote collections

API to retrieve followers and following collections for remote users.

Operations

Reports

Endpoints for reporting content and managing content reports

Operations

Rules

Endpoints for managing platform rules that govern user conduct and content policies

Operations

Sessions

Endpoints for managing user authentication sessions and device logins

Operations

Tags

Endpoints for managing hashtags, including following, featuring, and retrieving tag information

Operations

Tags v2

Scoped tags search, policy lists and reports

Operations

Translation

Endpoints for translating text between languages

Operations

Uploads

Endpoints for uploading, retrieving, and managing media files

Operations

User Devices

APIs for managing user devices for push notifications

Operations

User Settings

Endpoints for managing user-specific settings and preferences. These endpoints allow authenticated users to view, update, and delete their personal settings that control their account behavior, interface preferences, privacy options, and feature customizations.

Operations

Users

Endpoints for managing user profiles, including creation, retrieval, updates, and moderation

Operations

employee

Employee. DO NOT USE, SUBJECT TO CHANGE/REMOVE

employer

Employer. DO NOT USE, SUBJECT TO CHANGE/REMOVE

job-applications

Jobs. DO NOT USE, SUBJECT TO CHANGE/REMOVE

job-postings

Jobs. DO NOT USE, SUBJECT TO CHANGE/REMOVE

phone

Phone management

Operations

Fasp Resource

Operations

Debug Resource

Operations

Test Authenticated Controller

Operations

Test Class Auth Controller

Operations

Test Class Authenticated Controller

Operations

Test Class Permit All Controller

Operations

Test Permit All Controller

Operations

Test Authorization Controller

Operations

Quarkus Test Resource For Transaction

Operations