Posts created by the automation (you can take any post down)
Title
Status
Created by
Updated
Actions
Activity log (last 200)
Time
Actor
Action
IP
Detail
What to send the automation team
Send the endpoint below, the API spec (docs/API.md), and a token (create it on the API Tokens tab and share it through a password manager, never email or chat).
Example request:
Method
Path
Scope
GET
/api/v1/posts, /api/v1/posts/:id
posts:read
POST
/api/v1/posts
posts:write (status "published" also needs posts:publish)
PUT
/api/v1/posts/:id
posts:write (editing a live post needs posts:publish)
DELETE
/api/v1/posts/:id
posts:delete
Body fields: title, meta_description, image and optional card_image (files already in the website's /images/blogs/), image_alt, content (only p, h2, h3, ul, li, a), optional seo_title and slug, status (draft or published).
Copy your token now
This token is shown only once. Share it through a password manager or encrypted channel, never email/chat.
Two-factor login
Add a second step to sign-in using an authenticator app (Google Authenticator, Microsoft Authenticator, Authy, 1Password). Strongly recommended.
1. In your authenticator app choose Add account → Enter a setup key and type this key:
If you lose your phone you cannot sign in. Keep the setup key somewhere safe. A server admin can reset it with node scripts/admin.js disable-2fa <user>.
Two-factor login is on.
To turn it off, confirm with your password and a current code.