Admin API

Catalog admin endpoints are protected by CATALOG_ADMIN_KEY.

Endpoints (v1.2.0)

• PUT /admin/recipes/:name/quality — upsert quality overlay
• GET /admin/publishers — list publishers
• POST /admin/publishers — create publisher and API key
• POST /admin/seed — re-seed recipes from bridge repository
• GET /admin/analytics — dashboard-level usage data

Security model

• Read endpoints are public
• Write endpoints require publisher API keys
• Admin endpoints require separate elevated key
• Publisher API keys are stored as SHA-256 hashes

Related: Catalog Overview and Recipe publishing.