This page is a cross-service map, not a substitute for each product’s source and reference. Use Page and admin routes for browser surfaces.
Shared contract rules
- Public endpoints return explicit success and error responses; they do not depend on administrator cookies.
- Protected browser APIs require both the production edge policy and the service’s application authorization.
- Machine endpoints use dedicated credentials and bounded audiences rather than a person’s browser session.
- Mutation routes validate input before changing storage and emit audit evidence where the service contract requires it.
- Health endpoints omit resident records, secrets, and private infrastructure detail.
- A newly added protected route remains denied until its authorization behavior is reviewed.
Resident Council website APIs
| Path family | Access | Purpose |
|---|---|---|
/api/changelog | Public | Aggregate approved product changes |
/api/canva-image | Public | Resolve a public Canva preview |
/api/stats | Edge protection expected | Serve the published analytics artifact |
/api/csv-* | Edge protection expected | Upload, list, and read council datasets |
/api/dataset-types | Edge protection expected | List supported dataset schemas |
/api/publish | Edge protection expected | Publish curated analytics data |
Sources: ihnyc-rc-landing/functions/api/, ihnyc-rc-landing/README.md
RC Console APIs
| Path family | Access | Purpose |
|---|---|---|
/api/console/* | Verified Access identity plus Console capability | Council people, positions, assignments, terms, and settings |
/api/self/* | Verified current-member identity | Identity claim and own profile |
/api/members | Public | Published council-member artifact |
/api/casework-owners | Dedicated casework credential | Current role owners and the casework switch |
/api/health | Dedicated health credential | Non-PII cron, publish, and roster health |
RC Console is authoritative for council identity and roster workflows. It is not the authorization source for House Desk or Pub.
Resident voting APIs
Voting exposes public health and ballot routes, plus protected administration for elections, candidates, poll options, invitations, reminders, results, distribution lists, audit logs, and approved Notion links.
Use Voting API reference for exact methods, fields, and response shapes.
IHNYC Games APIs
| Path family | Access | Purpose |
|---|---|---|
/api/health | Public | Service health |
/api/events* | Public | Event lists and detail |
/api/standings | Public | Published standings |
/api/rosters/summary | Public | Aggregate roster totals |
/api/admin/* | Games administrator | Events, results, imports, submissions, and roster operations |
Use Games API reference for the complete contract.
Gallery API (decommissioned)
The retired Gallery exposed public item and media reads plus edge-protected administration. Its routes are historical and must not be treated as an active integration surface.