Authentication
Bearer token, per partner.
Every request uses a partner-admin token issued to your backend. Send it as a bearer token. Never expose it in client code.
Authorization header
HTTP
Authorization: Bearer po_part_...Endpoints
What you can call.
Users & Tenants
Mirror partner tenants and users into ParcelOps and issue per-user MCP bearer tokens.
- POST
/api/partner-admin/usersProvision or reactivate a partner user
- POST
/api/partner-admin/users/{userId}/rotate-tokenRotate a user's MCP bearer token
Connector Entitlements
Create partner-scoped connector entitlements without exposing premium connector secrets to ParcelOps.
- GET
/api/partner-admin/connectionsList connector entitlements
- POST
/api/partner-admin/connectionsCreate a connector entitlement
- PUT
/api/partner-admin/connections/{id}Rotate connector custody reference
- DELETE
/api/partner-admin/connections/{id}Disable a connector entitlement
Usage & Billing
Read current usage, inspect closed billing periods, and submit partner seat reports.
- GET
/api/partner-admin/usage/currentRead current-period usage
- GET
/api/partner-admin/usage/periodsList closed usage periods
- GET
/api/partner-admin/usage/periods/{periodId}Read one usage period
- POST
/api/partner-admin/usage/periods/{periodId}/self-reportSubmit partner seat report
