Account, keys & notifications
Profile
PATCH /api/profile/me/ updates it; POST /api/profile/me/avatar/ (multipart) or …/avatar/preset/ sets the avatar.
Delete the account
Permanently deletes the signed-in user and the bots, knowledge bases and conversations they own. It needs the current password, and there is no undo:
{"currentpassword": "your-password"}
204 on success, 400 with {"message": "Current password is incorrect."} otherwise.
API keys
POST /api/system-api-keys/ creates one — the full key is returned once. POST …/{id}/revoke/ and …/activate/ switch it off and on.
Notifications
GET /api/notifications/, POST …/{id}/mark-read/, POST …/mark-all-read/.
Analytics events
POST /api/analytics/events/ records a custom event (eventtype, channel, metadata) — the dashboard uses it for page views.