> ## Documentation Index
> Fetch the complete documentation index at: https://docs.co-mind.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# System Admin API

> Programmatic access to cross-tenant and system-wide administration operations.

The System Admin API surface is used by system administrators of a Co-mind.ai deployment to manage the platform across every tenant, configure global policies, and view platform-wide observability.

## Availability

This API is **not currently exposed in the public API reference.**

It powers the system administration screens in the Co-mind.ai web application today and is available through the platform's admin UI. Programmatic access via the HTTP API can be provided on request, scoped to your integration's needs.

## What it covers

* **Cross-tenant management** — list, provision, and configure tenants across the platform
* **Cross-tenant user management** — search and manage users across every tenant, including reset-password and cross-tenant assignment
* **Bootstrap and platform mode** — initial setup, platform mode selection, install-token consumption
* **Tier configuration** — define and update the platform's usage tiers and their limits
* **Model defaults** — configure the platform's default chat model, embedding model, and per-tenant overrides
* **Inference backends** — register, test, and reload inference backends (self-hosted vLLM/Ollama, cloud providers)
* **Governance (EU AI Act Article-12 compliance)** — approvals workflow, incident tracking, risk classification, risk heatmap, data lineage, provenance ledger, SIEM export configuration, conformity reporting
* **System health** — cached observability of every downstream service (RAG, inference engine, sanitizer, docling, echo-engine, researcher, agent-proxy)
* **Audit logs** — read the platform's tamper-evident audit trail across all tenants
* **Sanitizer administration** — cross-tenant sanitizer policy defaults and health

## Authentication

All System Admin endpoints require an interactive **session JWT** from an account that is an Admin in the System Tenant. Membership in a regular tenant does not grant access.

Personal Access Tokens (PATs) are **not accepted** on System Admin endpoints by design — these operations affect global platform state and require an interactively-established, tenant-switch-aware session.

## Requesting access

To integrate against System Admin endpoints programmatically, please contact us at [support@co-mind.ai](mailto:support@co-mind.ai). Include the operations you need, the security context of the integrating system, and the deployment involved. We will share the endpoint specification scoped to your use case.