Skip to content
Download OpenAPI description
Languages
Servers
Mock server
https://docs.wellesley.social/_mock/openapi/
Simple setup, all in one. Digital Ocean
https://dust.allroads.social/
Simple setup, db is separate. Digital Ocean
https://meteor.allroads.social/

AI Agents

Assign and list group AI agent assignments

Operations

Accounts

Account management and authentication endpoints. Handles user registration, login flows (email/phone), profile management, and account lifecycle operations. Supports multi-step signup with email/SMS verification, CAPTCHA, and optional admin approval.

Operations

ActivityPub

WebFinger endpoint for ActivityPub user discovery and federation

Addresses

Endpoints for suggesting and validating physical addresses

Operations

Admin

Development and testing endpoints for populating the database with test data

Admin Accounts

Administrative endpoints for account and user management. Provides comprehensive tools for managing user accounts, including creation, deletion, role assignment, password management, state changes, and user impersonation for bot accounts.

Operations

Admin ActivityPub

Administrative endpoints for ActivityPub

Operations

Admin Audit

Administrative endpoints for viewing and managing audit logs. Provides comprehensive logging of all security-relevant actions performed in the system.

Operations

Admin Domain Blocks

Administrative APIs for managing domain blocks. Provides endpoints to block specific domains with different severity levels (SUSPEND, LIMIT, NOOP), update existing blocks, unblock domains, and list currently blocked domains. Domain blocks prevent or limit federation with specified domains.

Operations

Admin Domains Allow List

Administrative endpoints for managing domain allowlists. When domain allowlisting is enabled, only domains in this list can federate with the instance.

Operations

Admin Email Allow List

Administrative endpoints for managing email domain allowlist used for registrations.

Operations

Admin Email Blocks

Administrative APIs for managing email blocks to prevent unwanted signups. Supports blocking specific email addresses and entire domains. Email blocks are automatically normalized and checked during user registration.

Operations

Admin Federation Metrics

Administrative endpoints for monitoring and managing federation with other ActivityPub instances. Provides metrics on connected domains, user counts, post statistics, and federation health monitoring.

Operations

Admin Feeds

Administrative endpoints for managing user feeds and cache

Operations

Admin Groups

Administrative endpoints for Groups management

Operations

Admin Init

Administration endpoints for system initialization and updates

Admin Posts

Administrative endpoints for managing posts. Provides moderation capabilities to delete posts that violate community guidelines or are part of reported content.

Operations

Admin Reports

Administrative endpoints for managing user reports and moderation. Provides tools for reviewing, assigning, resolving, and annotating reports about users, posts, and groups. Supports workflow management with assignment, notes, and resolution tracking.

Operations

Admin Signup Requests

Administrative endpoints for managing user signup requests. Provides tools for reviewing, approving, rejecting, and managing signup requests in moderation queue. Supports workflow for manual account approval when enabled.

Operations

Admin Uploads

Administrative endpoints for managing file uploads and media storage. Provides tools for monitoring user storage usage, searching uploaded files, and managing upload processing jobs. Supports queue management for async upload processing workflows.

Operations

Aliases

Endpoints for managing previous usernames and username aliases

Operations

Application Data

Endpoints for managing application-specific data storage. Provides a flexible key-value storage system for applications to store custom data associated with users, groups, or the platform. Supports tagging, filtering, and ownership-based access control.

Operations

Applications

Endpoints for serving and routing platform applications to users

Operations

Blocks

User blocking functionality for preventing interaction with specific users. Blocking a user prevents them from following you, seeing your posts, or interacting with your content. Block operations are federated to remote servers when blocking remote users.

Operations

Categories

Endpoints for managing forum-specific categories

Operations

Domain Blocks

Public API for listing domains blocked by this instance. Visibility and reason details are controlled by platform settings.

Operations

Domain-blocks

Endpoints for managing user-level domain blocks to filter content from specific servers

Operations

Drafts

Endpoints for creating, reading, updating, and deleting drafts, as well as publishing them to posts

Operations

Email

Email address management for user accounts. Provides secure email change workflow with verification codes, password confirmation, and notification system. All email changes require authentication and are logged for security.

Operations

Emoji

Custom emoji management system for the platform. Supports creating, uploading, importing/exporting, searching, and deleting custom emojis. Emojis are automatically resized and optimized. Admin-only operations require Emojis.Manage permission.

Operations

Get emojis by shortcodes or categories

Request

Retrieves emojis by exact shortcodes and/or by exact categories from cache. Multiple values can be requested in a single call using comma separation. If both parameters are provided, the union of results is returned. Returns paginated response with items (current page results), total (count matching filter), and totalItems (total emojis in system).

Query
categoryArray of strings or null

Exact category name(s). Multiple values comma-separated

Example: category=Cats,Dogs
lastIdstring or null

Get older records (records with IDs less than this value) Alias maxId/max_id

Example: lastId=?lastId=${data.last().id}
limitinteger or null(int32)
offsetinteger or null(int32)
shortcodeArray of strings or null

Exact shortcode(s) of emoji. Multiple values comma-separated

Example: shortcode=aaaa,AAAAAA
sortBystring or null
sortOrderstring or null
untilIdstring or null

Get newer records (records with IDs greater than this value) Alias minId/min_id

Example: untilId=?untilId=${data.first().id}
curl -i -X GET \
  'https://docs.wellesley.social/_mock/openapi/api/v1/custom_emojis?category=Cats%2CDogs&lastId=%3FlastId%3D%24{data.last%28%29.id}&limit=0&offset=0&shortcode=aaaa%2CAAAAAA&sortBy=string&sortOrder=string&untilId=%3FuntilId%3D%24{data.first%28%29.id}'

Responses

Paginated emoji results

Bodyapplication/json
itemsArray of objects(Emoji)required

Paginated list of emojis for the current page

items[].​shortcodestringrequired
items[].​categorystring or null
items[].​urlstring(uri)required
items[].​staticUrlstringrequired
items[].​visibleInPickerboolean
totalinteger(int32)

Total number of emojis that satisfy the filter

totalItemsinteger(int32)

Total number of all emojis in the system

Response
application/json
{ "items": [ { … }, { … } ], "total": 2, "totalItems": 100 }

Request

Deletes custom emojis by shortcode or category. Can delete multiple emojis at once using comma-separated values. Either shortcode or category must be provided. Returns the count of deleted emojis. Requires Emojis.Manage permission (admin only).

RBAC: requires Emojis.Manage

Query
categoryArray of strings or null

You can provide multiple categories as comma-separated values

Example: category=?category=Cats,Dogs
shortcodeArray of strings or null

You can provide multiple shortcodes as comma-separated values

Example: shortcode=?shortcode=aaa,AAA
curl -i -X DELETE \
  'https://docs.wellesley.social/_mock/openapi/api/v1/custom_emojis?category=%3Fcategory%3DCats%2CDogs&shortcode=%3Fshortcode%3Daaa%2CAAA'

Responses

Number of deleted emojis

Bodyplain/text
Response
plain/text
3

Request

Creates a custom emoji by downloading from provided URLs. The emoji file is downloaded, processed, and stored locally. Supports overwriting existing emojis with the same shortcode. Can specify category, visibility, and domain for federated emojis. Requires Emojis.Manage permission (admin only).

RBAC: requires Emojis.Manage

Query
overwriteboolean

Should existing emojis be overwritten if shortcode matches

Bodyapplication/jsonrequired

Json object with the emoji data: shortcode, category, url, staticUrl, visibleInPicker

shortcodestringrequired
categorystring or null
urlstring(uri)required
staticUrlstringrequired
visibleInPickerboolean
curl -i -X POST \
  'https://docs.wellesley.social/_mock/openapi/api/v1/custom_emojis?overwrite=true' \
  -H 'Content-Type: application/json' \
  -d '{
    "shortcode": "string",
    "category": "string",
    "url": "http://example.com",
    "staticUrl": "string",
    "visibleInPicker": true
  }'

Responses

json object with the emoji data

Bodyapplication/json
shortcodestringrequired
categorystring or null
urlstring(uri)required
staticUrlstringrequired
visibleInPickerboolean
Response
application/json
"\n {\n \"shortcode\": \"aaaa\",\n \"url\": \"https://files.mastodon.social/custom_emojis/images/000/007/118/original/aaaa.png\",\n \"static_url\": \"https://files.mastodon.social/custom_emojis/images/000/007/118/static/aaaa.png\",\n \"visibleInPicker\": true\n \"category\": \"Cats\",\n \"domain\": \"mastodon.social\"\n }\n ]\n "

Request

Returns distinct non-empty categories. Supports optional query and pagination.

RBAC: requires Emojis.Manage

Query
lastIdstring or null

Get older records (records with IDs less than this value) Alias maxId/max_id

Example: lastId=?lastId=${data.last().id}
limitinteger or null(int32)
offsetinteger or null(int32)
qstring or null

Filter categories by substring

sortBystring or null
sortOrderstring or null
untilIdstring or null

Get newer records (records with IDs greater than this value) Alias minId/min_id

Example: untilId=?untilId=${data.first().id}
curl -i -X GET \
  'https://docs.wellesley.social/_mock/openapi/api/v1/custom_emojis/categories?lastId=%3FlastId%3D%24{data.last%28%29.id}&limit=0&offset=0&q=string&sortBy=string&sortOrder=string&untilId=%3FuntilId%3D%24{data.first%28%29.id}'

Responses

List of categories

Bodyapplication/jsonArray [
string
]
Response
application/json
[ "string" ]

Request

Exports emojis from a specific category as a ZIP archive. The ZIP contains all emoji files from the specified category. Useful for backup or migration purposes. Returns 404 if no emojis found in the category. Requires Emojis.Manage permission (admin only).

RBAC: requires Emojis.Manage

Query
categorystring

Category of the emojis to export

curl -i -X GET \
  'https://docs.wellesley.social/_mock/openapi/api/v1/custom_emojis/export?category=string'

Responses

Zip file with the emojis

Bodyapplication/octet-stream
Response
No content

Request

Imports multiple emojis from a ZIP archive. Filenames (without extension) become emoji shortcodes. All imported emojis share the same category and visibility settings. Images are automatically resized to 128x128 if larger. Animated GIFs are preserved with static versions generated. Supports batch overwriting of existing emojis. Requires Emojis.Manage permission (admin only).

RBAC: requires Emojis.Manage

Query
categorystringrequired

Category of the imported emojis

domainstring or null
overwriteboolean

Should existing emojis be overwritten if any of the shortcodes match

visiblebooleanrequired

Whether the imported emojis should be visible in the picker

Bodymultipart/form-datarequired

Zip file with the emojis.

filestring(binary)required
curl -i -X POST \
  'https://docs.wellesley.social/_mock/openapi/api/v1/custom_emojis/import?category=string&domain=string&overwrite=true&visible=true' \
  -H 'Content-Type: multipart/form-data' \
  -F file=string

Responses

Array of json objects with the emoji data

Bodyapplication/jsonArray [
shortcodestringrequired
categorystring or null
urlstring(uri)required
staticUrlstringrequired
visibleInPickerboolean
]
Response
application/json
[ { "shortcode": "aaaa", "url": "https://files.mastodon.social/custom_emojis/images/000/007/118/original/aaaa.png", "static_url": "https://files.mastodon.social/custom_emojis/images/000/007/118/static/aaaa.png", "visibleInPicker": true, "category": "Cats" }, { "shortcode": "AAAAAA", "url": "https://files.mastodon.social/custom_emojis/images/000/071/387/original/AAAAAA.png", "static_url": "https://files.mastodon.social/custom_emojis/images/000/071/387/static/AAAAAA.png", "visibleInPicker": true, "category": "Blobs" } ]

Bulk import emojis from ZIP upload

Request

Imports multiple emojis from a ZIP archive that was previously uploaded via /uploads. Filenames (without extension) become emoji shortcodes. All imported emojis share the same category and visibility settings. Images are automatically resized to 128x128 if larger. Animated GIFs are preserved with static versions generated. Supports batch overwriting of existing emojis.

RBAC: requires Emojis.Manage

Query
categorystringrequired

Category of the imported emojis

domainstring or null
overwriteboolean

Should existing emojis be overwritten if any of the shortcodes match

uploadIdstring(TypeId)required

ID of the previously created upload containing the ZIP archive

Example: uploadId=us_01hxcvk1hjexere4pvtrj0ymqq
visiblebooleanrequired

Whether the imported emojis should be visible in the picker

curl -i -X POST \
  'https://docs.wellesley.social/_mock/openapi/api/v1/custom_emojis/import/upload?category=string&domain=string&overwrite=true&uploadId=us_01hxcvk1hjexere4pvtrj0ymqq&visible=true'

Responses

Array of json objects with the emoji data

Bodyapplication/jsonArray [
shortcodestringrequired
categorystring or null
urlstring(uri)required
staticUrlstringrequired
visibleInPickerboolean
]
Response
application/json
[ { "shortcode": "string", "category": "string", "url": "http://example.com", "staticUrl": "string", "visibleInPicker": true } ]

Search emojis by partial shortcode or category

Request

Searches for emojis whose shortcodes or categories contain provided substrings. Useful for autocomplete functionality. Multiple searches can be performed in one request by passing comma-separated values. If no parameters provided, returns all emojis from cache. Returns paginated response with items (current page results), total (count matching filter), and totalItems (total emojis in system).

Query
categoryArray of strings or null

Category substring(s) to search. Comma-separated

Example: category=Cat,Blob
lastIdstring or null

Get older records (records with IDs less than this value) Alias maxId/max_id

Example: lastId=?lastId=${data.last().id}
limitinteger or null(int32)
offsetinteger or null(int32)
shortcodeArray of strings or null

Shortcode substring(s) to search. Comma-separated

Example: shortcode=aaa,AAA
sortBystring or null
sortOrderstring or null
untilIdstring or null

Get newer records (records with IDs greater than this value) Alias minId/min_id

Example: untilId=?untilId=${data.first().id}
curl -i -X GET \
  'https://docs.wellesley.social/_mock/openapi/api/v1/custom_emojis/search?category=Cat%2CBlob&lastId=%3FlastId%3D%24{data.last%28%29.id}&limit=0&offset=0&shortcode=aaa%2CAAA&sortBy=string&sortOrder=string&untilId=%3FuntilId%3D%24{data.first%28%29.id}'

Responses

Paginated emoji search results

Bodyapplication/json
itemsArray of objects(Emoji)required

Paginated list of emojis for the current page

items[].​shortcodestringrequired
items[].​categorystring or null
items[].​urlstring(uri)required
items[].​staticUrlstringrequired
items[].​visibleInPickerboolean
totalinteger(int32)

Total number of emojis that satisfy the filter

totalItemsinteger(int32)

Total number of all emojis in the system

Response
application/json
{ "items": [ { … }, { … } ], "total": 15, "totalItems": 100 }

Request

Processes an existing upload (created via /uploads) as a custom emoji. Clients must first create an upload and PUT the file to the returned URL, then call this endpoint with the uploadId.

RBAC: requires Emojis.Manage

Query
categorystringrequired

Category of the emoji

domainstring or null
overwriteboolean

Should existing emojis be overwritten if shortcode matches

shortcodestringrequired

Shortcode of the emoji

uploadIdstring(TypeId)required

ID of the previously created upload containing the emoji file

Example: uploadId=us_01hxcvk1hjexere4pvtrj0ymqq
visiblebooleanrequired

Whether the emoji should be visible in the picker

curl -i -X POST \
  'https://docs.wellesley.social/_mock/openapi/api/v1/custom_emojis/upload?category=string&domain=string&overwrite=true&shortcode=string&uploadId=us_01hxcvk1hjexere4pvtrj0ymqq&visible=true'

Responses

json object with the emoji data

Bodyapplication/json
shortcodestringrequired
categorystring or null
urlstring(uri)required
staticUrlstringrequired
visibleInPickerboolean
Response
application/json
{ "shortcode": "string", "category": "string", "url": "http://example.com", "staticUrl": "string", "visibleInPicker": true }

Request

Updates emoji metadata fields without requiring file upload. Supports updating category, visibility and domain. Requires Emojis.Manage permission.

RBAC: requires Emojis.Manage

Path
shortcodestringrequired

Emoji shortcode

Bodyapplication/jsonrequired
categorystring or null

New category for the emoji

visibleInPickerboolean or null

Visibility in emoji picker

domainstring or null

Domain for federated emoji metadata

curl -i -X PATCH \
  'https://docs.wellesley.social/_mock/openapi/api/v1/custom_emojis/{shortcode}' \
  -H 'Content-Type: application/json' \
  -d '{
    "category": "string",
    "visibleInPicker": true,
    "domain": "string"
  }'

Responses

Updated emoji

Bodyapplication/json
shortcodestringrequired
categorystring or null
urlstring(uri)required
staticUrlstringrequired
visibleInPickerboolean
Response
application/json
{ "shortcode": "string", "category": "string", "url": "http://example.com", "staticUrl": "string", "visibleInPicker": true }

Events

Endpoints for creating, retrieving, and managing events and attendees

Operations

Events ActivityPub

ActivityPub-compatible endpoint for events

Follow

User follow relationship management. Handles following/unfollowing users, managing follow requests, and querying follower/followee relationships. Supports both local and remote (federated) users with ActivityPub protocol integration.

Operations

Forums

Endpoints for managing discussion forums, including creation, retrieval, and deletion

Operations

Geo

Endpoints for geographic location lookup and timezone services

Operations

Group Applications

Endpoints for managing applications available to groups, including listing, adding, and removing group-specific applications

Operations

Group Channels

API endpoints for managing channels within groups. Channels are specialized accounts that enable organized content distribution within groups. They support hierarchical organization with main and default channels, privacy controls inherited from parent groups, and both scoped (group-specific) and global usernames for discovery. Group administrators manage channels while members can follow them.

Operations

Group Member Settings

Endpoints for managing member-specific settings within groups. These settings are personal to each group member and affect their individual experience within the group. Members can only access and modify their own settings within groups they belong to.

Operations

Group Members

API endpoints for managing group membership. Provides functionality to add, update, and remove members from groups, as well as retrieve membership information. Supports both local and federated groups through ActivityPub protocol. Access control is enforced based on group privacy settings and user permissions.

Operations

Group Questions

API endpoints for managing group entry questions. Groups can require prospective members to answer questions before joining. Questions support multiple types (text, single choice, multiple choice) and are used to screen members when the group's join mode is set to QUESTIONS. Answers are validated and generate a token that can be used during the join process.

Operations

Group Reports

Group-scoped moderation reports. Allows group admins to review and resolve reports targeting their channels, forums, and events without global moderator access.

Operations

Group Rules

API endpoints for managing community rules within groups. Rules define the expected conduct and content policies that members must follow. Each rule consists of text (the rule itself), a hint (explanation or context), and an ordering value for display sequence. Rules are scoped to specific groups and can be managed by users with appropriate permissions.

Operations

Group Settings

Endpoints for managing group-specific settings and configuration options. These endpoints allow authorized group members to view, update, and delete settings that control group behavior, features, and customization options.

Operations

Groups

API endpoints for managing groups within the Wellesley platform. Groups are community spaces that can be public or private, support forums, and have their own membership and permission systems. Groups can be federated via ActivityPub for cross-instance communication.

Operations

Import

Endpoints for importing data from other platforms including followers, blocks, and mutes

Operations

Instance

Server instance information and configuration. Provides metadata about the server, compatible domains, supported languages, timezones, and countries. All endpoints are publicly accessible without authentication.

Operations

Invites

Endpoints for sending and managing user invitations

Operations

Jobs

Endpoints for monitoring and managing background job queues, including statistics, job listings, and queue monitoring

Operations

Lists

Endpoints for managing user lists for organizing and grouping followed accounts

Operations

Logins

Endpoints for managing user login methods including email, password, and phone authentication

Operations

Metrics

Endpoints for retrieving metrics and analytics data from the events stream

Operations

Mutes

Endpoints for managing user mutes to hide content from specific users

Operations

Notes

Endpoints for managing personal notes about other users

Operations

Notifications

Endpoints for managing user notifications including retrieving, counting, and marking notifications as read or unread

Operations

Passkeys

Passkey (WebAuthn) registration and authentication

Operations

Password

Endpoints for password management including changing, resetting, and recovering passwords

Operations

Pins

Endpoints for pinning posts to profiles and retrieving pinned posts

Operations

Platform Data

Endpoints for managing platform-wide and group-specific data storage. Unlike application data, this provides direct data management not tied to specific applications. Supports flexible ownership models including platform-level, group-level, and user-level data with appropriate access controls.

Operations

Platform Settings

Endpoints for managing platform-wide settings and configuration options. These endpoints control server-level settings that affect the entire platform, including features, limits, security policies, and default behaviors for all users and groups.

Operations

Polls

Endpoints for interacting with polls, including voting and retrieving results

Operations

Posts

Endpoints for creating, reading, updating, and deleting posts, as well as managing comments, likes, bookmarks, and reposts

Operations

RBAC

Endpoints for retrieving Role-Based Access Control (RBAC) configurations and managing roles, resources, permissions and role-to-user assignments. Scoped Role Definition (RBACRole):

  • Represents roles within the RBAC system.
  • Each role has a unique roleId, a name, an optional description, and a scope.
  • The scope defines the domain or area in which the role is valid.
  • The scope can be Global (hardcoded), currently the only one is "System"
  • The scope also can be dynamic, currently we use Group Ids, like "gr_05hxcvk1hjexere4pvtrj0hggt"
  • Roles come with assigned permissions (RBACPermissions) that define what actions the role can perform on system resources.
  • Metadata such as createdAt and updatedAt timestamps track the role's lifecycle events.

Permissions** (RBACPermissions):

  • Encapsulates resource-specific access controls.
  • Each permission object specifies the resource (e.g., "user", "document") and an associated list of allowed RBACAccess types.
  • RBACAccess enumerates the supported actions: Read, Add, Modify, Delete.

Role Assignments to Actors (RBACActorRole):

  • Maps actors (e.g., users, services) to specific roles.
  • Tracks the association through actorId (representing the unique entity being assigned) and roleId (specific role ID).
  • Includes timestamps to record when the assignment was created or updated.
Operations

Remote collections

API to retrieve followers and following collections for remote users.

Operations

Reports

Endpoints for reporting content and managing content reports

Operations

Rules

Endpoints for managing platform rules that govern user conduct and content policies

Operations

Sessions

Endpoints for managing user authentication sessions and device logins

Operations

Tags

Endpoints for managing hashtags, including following, featuring, and retrieving tag information

Operations

Tags v2

Scoped tags search, policy lists and reports

Operations

Translation

Endpoints for translating text between languages

Operations

Uploads

Endpoints for uploading, retrieving, and managing media files

Operations

User Devices

APIs for managing user devices for push notifications

Operations

User Settings

Endpoints for managing user-specific settings and preferences. These endpoints allow authenticated users to view, update, and delete their personal settings that control their account behavior, interface preferences, privacy options, and feature customizations.

Operations

Users

Endpoints for managing user profiles, including creation, retrieval, updates, and moderation

Operations

employee

Employee. DO NOT USE, SUBJECT TO CHANGE/REMOVE

employer

Employer. DO NOT USE, SUBJECT TO CHANGE/REMOVE

job-applications

Jobs. DO NOT USE, SUBJECT TO CHANGE/REMOVE

job-postings

Jobs. DO NOT USE, SUBJECT TO CHANGE/REMOVE

Operations
Operations
Operations
Operations
Operations

Test Class Authenticated Controller

Operations
Operations
Operations
Operations

Quarkus Test Resource For Transaction

Operations