# Admin API

Section: API
Page: https://docs.konecto.ltd/api/admin

Server-side endpoints for events, tickets, orders, attendees, pages and modules.

Called with a secret key or OAuth token. Requires the matching scope.

| Method | Path | Scope |
| --- | --- | --- |
| GET, POST | /events | events:read, events:write |
| GET, PATCH | /events/{id} | events:read, events:write |
| POST | /events/{id}/publish | events:write |
| GET, POST | /events/{id}/ticket-types | events:read, events:write |
| GET, POST | /events/{id}/promo-codes | events:read, events:write |
| GET | /events/{id}/orders | orders:read |
| POST | /orders/{id}/refund | orders:refund |
| GET | /events/{id}/attendees | orders:read |
| GET, PATCH | /events/{id}/page | pages:write |
| POST | /events/{id}/page/publish | pages:write |
| POST | /assets | pages:write |
| GET | /events/{id}/checkin/summary | events:read |
| POST | /checkin/scan | events:write |
| GET, POST | /events/{id}/tasks | tasks:read, tasks:write |
| GET, POST | /events/{id}/costs | finance:read, finance:write |
| GET | /events/{id}/pnl | finance:read |
| GET | /events/{id}/analytics | analytics:read |
| GET | /modules | events:read |

## Create an event
``bash
curl https://api.konecto.ltd/v1/events \
  -H "Authorization: Bearer sk_live_..." \
  -H "Idempotency-Key: 5f1c..." \
  -H "Content-Type: application/json" \
  -d '{ "name": "Acme Summit", "starts_at": "2027-03-04T09:00:00", "timezone": "Europe/London", "capacity": 800 }'
``