Platform — API endpoints

Base domain

• https://admin.streamercatalyst.com

Endpoints

Path	Method	Auth	Description
/auth/login	GET	Public	Twitch OAuth entry point — redirects to Twitch consent screen.
/auth/callback	GET	Public	OAuth callback — exchanges code for token and creates session.
/auth/logout	POST	Session cookie	Clears the session cookie.
/billing/*	GET	Session cookie	Billing portal, plan selection, and Stripe checkout.
/stripe/*	POST	Stripe HMAC signature	Stripe webhook receiver (HMAC-verified).
/api/me	GET	Session cookie	Current user identity (proxied via web Worker).
/api/feedback	POST	Session cookie	Feedback submission endpoint (CORS-open to all module origins).
/api/notifications	GET	Session cookie	Unread notification count and list.
/api/channels/*	*	Session cookie	Channel config and module registry.
/api/dashboard/*	*	Session cookie	Dashboard session and onboarding state.
/internal/me	GET	X-Internal-Token header	Session lookup used by the web Worker proxy (internal only).
/internal/billing/downgrade	POST	Service binding (internal)	Tier-downgrade fan-out from Stripe webhook handler (internal only).

Auth model

• Session cookie endpoints require an active StreamerCatalyst session (set at login via the platform Worker).
• Service binding endpoints are reachable only via Cloudflare service bindings — not from the public internet.
• Public endpoints require no authentication.