# Admin API

Section: API
Page: https://docs.konec.to/api/admin

Server-side endpoints for events, tickets, orders, attendees, pages and modules.

Called with a secret key or OAuth token. Requires the matching scope.

| Method | Path | Scope |
| --- | --- | --- |
| GET, POST | /events | events:read, events:write |
| GET, PATCH | /events/{id} | events:read, events:write |
| POST | /events/{id}/publish | events:write |
| GET, POST | /events/{id}/ticket-types | events:read, events:write |
| GET, POST | /events/{id}/promo-codes | events:read, events:write |
| GET | /events/{id}/orders | orders:read |
| POST | /orders/{id}/refund | orders:refund |
| GET | /events/{id}/attendees | orders:read |
| GET, PATCH | /events/{id}/page | pages:write |
| POST | /events/{id}/page/publish | pages:write |
| POST | /assets | pages:write |
| GET | /events/{id}/checkin/summary | events:read |
| POST | /checkin/scan | events:write |
| GET, POST | /events/{id}/tasks | tasks:read, tasks:write |
| GET, POST | /events/{id}/costs | finance:read, finance:write |
| GET | /events/{id}/pnl | finance:read |
| GET | /events/{id}/analytics | analytics:read |
| GET, POST | /events/{id}/challenges | events:read, events:write |
| GET | /challenges/{id}/leaderboard | events:read |
| POST | /challenges/{id}/draw | events:write |
| GET | /modules | events:read |

## Create a challenge
``bash
curl https://api.konec.to/v1/events/evt_123/challenges \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Booth quest",
    "combine": "all",
    "actions": [
      { "type": "booth_scan", "target": { "all": true }, "verified_by": "exhibitor_staff" },
      { "type": "exhibitor_connection", "target": { "percent": 30 } }
    ],
    "window": { "starts_at": "2027-03-06T09:00:00", "ends_at": "2027-03-06T18:00:00" },
    "reward": { "type": "prize_draw", "description": "2 VIP passes for next year", "winners": 1 }
  }'
`

Action types: booth_scan, exhibitor_connection, attendee_connection, session_checkin, sponsor_visit, offer_redemption, survey_answer, early_checkin, profile_complete. Reward types: prize_draw, instant, points, badge, leaderboard, discount_code, vip_access, donation.

## Create an event
`bash
curl https://api.konec.to/v1/events \
  -H "Authorization: Bearer sk_live_..." \
  -H "Idempotency-Key: 5f1c..." \
  -H "Content-Type: application/json" \
  -d '{ "name": "Acme Summit", "starts_at": "2027-03-04T09:00:00", "timezone": "Europe/London", "capacity": 800 }'
``