HYBRID-CHAINDEVELOPERS
DOCUMENTATIONv2

OPERATE · MODULE 01

Overview

Give an authenticated operator a concise, read-oriented view of account posture, recent activity, alerts, and the next actions that matter.

BUSINESS CASES

Where this module fits

  • daily account review
  • exception triage
  • cross-module navigation

PRIMARY CONSUMERS

Who integrates it

  • account operators
  • support agents
  • portfolio assistants

PREREQUISITES

What must exist first

  • an authenticated profile
  • access to the selected workspace

RECOMMENDED WORKFLOW

Compose the module safely.

  1. 01

    load the authenticated account projection

  2. 02

    inspect balances, activity, and alerts

  3. 03

    follow a typed link into the owning module

MODULE CONTRACTS

Every mapped endpoint

Each operation states whether its request shape is authoritative in OpenAPI, reviewed as a planning profile, or intentionally left as an outline pending an owner schema.

POSTVerify bearer token/api/v2/mePlanned capability: apply the requested transition to bearer token through the authoritative trust service boundary.›POSTCreate identity/api/v2/identitiesPlanned capability: apply the requested transition to identity through the authoritative trust service boundary.›GETGet identity details/api/v2/identities/{identity_uuid}Planned capability: return identity details through the authoritative trust service boundary.›GETGet subject transfer credentials/api/v2/identity/transfer-credentials/subject/profile/{profile_uuid}Planned capability: return manage subject transfer credentials through the authoritative trust service boundary.›POSTUpdate subject transfer credentials/api/v2/identity/transfer-credentials/subject/profile/{profile_uuid}Planned capability: apply the requested transition to manage subject transfer credentials through the authoritative trust service boundary.›POSTActivate account/api/v2/account-activationsConsume a one-time activation credential, activate the account, and return the canonical activation receipt.›GETList linked bank accounts/api/v2/funding/bank-accountsReturn the authenticated profile's linked bank accounts with opaque identifiers, masked IBANs, currencies, and verification state; full account numbers and legacy database identifiers are excluded.›GETGet referral summary/api/v2/growth/referralsReturn referral codes and aggregate usage for the authenticated profile without exposing referred-user identities, contact details, commission data, downline graphs, or the legacy user JSON.›GETGet wallet balances/api/v2/ledger/accounts/{account_id}/balancesList wallet balances through the authoritative custody service boundary.›GETGet current profile/api/v2/meReturn the authenticated identity's current purpose-limited profile projection.›PATCHUpdate current profile/api/v2/meUpdate allowlisted current-profile fields through the authoritative Identity profile service.›GETList authentication events/api/v2/me/authentication-eventsList successful password and federated sign-ins with redacted device context and integrity-protected cursor pagination.›GETGet profile avatar image/api/v2/me/avatarPlanned capability: list profile avatar image through the authoritative trust service boundary.›POSTUpload profile avatar image/api/v2/me/avatarPlanned capability: apply the requested transition to upload profile avatar image through the authoritative trust service boundary.›GETGet effective capabilities/api/v2/me/capabilitiesReturn effective profile scopes and security features for the authenticated identity.›PUTChange password/api/v2/me/passwordRequire bearer authorization, current-password proof, conditional authenticator step-up, and revoke active sessions.›GETGet symbol watchlist/api/v2/me/watchlistList symbol watchlist through the authoritative trust service boundary.›DELETERemove symbol from watchlist/api/v2/me/watchlist/{market_id}Apply the requested transition to symbol from watchlist through the authoritative trust service boundary.›PUTAdd symbol to watchlist/api/v2/me/watchlist/{market_id}Apply the requested transition to add symbol to watchlist through the authoritative trust service boundary.›POSTRequest reset link/api/v2/password-reset-requestsApply the requested transition to reset link through the authoritative trust service boundary.›POSTReset password/api/v2/password-resetsApply the requested transition to reset password through the authoritative trust service boundary.›GETGet tenant brand/api/v2/tenant-brandReturn the authenticated tenant's presentation-safe names, theme, assets, links, and labels without exposing policy, credential, banking, registration, or infrastructure configuration.›GETGet allocation summary/api/v2/operational-wallets/summaryReturn primary, AI, merchant, deployed operational, and pending-settlement allocation for the authenticated workspace and network.›GETList account activity/api/v2/account/activityPlanned capability: list normalized, cursor-paginated activity from the services the account is authorized to view.›GETGet account posture/api/v2/account/overviewPlanned capability: return the authenticated account's operational posture across wallets, funding, compliance, billing, and activity.›GETMobile messaging device status/api/v2/identity/messaging/device-status/{session_id}Return mobile messaging device status through the authoritative trust service boundary.›POSTRegister messaging device keys/api/v2/identity/mobile/messaging/deviceBind one authenticated application installation to independently generated Ed25519 signing and X25519 encryption public keys after proof of possession, then return a signed device credential.›GETIssue messaging ticket/api/v2/identity/mobile/messaging/ticketIssue a short-lived device- and session-bound messaging ticket for an installation with an active signed device credential.›GETList account signals/api/v2/notifications/allList the authenticated profile and workspace's cursor-paginated operational signals, including unread count and optional archived-history inclusion, without granting authority over any referenced domain action.›POSTMark account signals/api/v2/notifications/markAtomically set one to 100 owner-scoped notification records to UNREAD, READ, or ARCHIVED using an idempotent acknowledgement command.›POSTPush new notification/api/v2/notifications/pushPlanned capability: apply the requested transition to push new notification through the authoritative notification service boundary.›GETList unread account signals/api/v2/notifications/unreadList only unread operational signals for the authenticated profile and workspace, with the same bounded cursor and no-authority guarantees as the complete inbox.›
RELATED MODULESReturn to the complete V2 directory ↗