| Method | Path | Summary | Auth |
|---|---|---|---|
| GET | /v1/account/api-keys | List API keys owned by the current tenant user | Session |
| POST | /v1/account/api-keys | Create and activate an API key for the current tenant user | Session |
| GET | /v1/account/api-keys/{key_id} | Get API key metadata owned by the current tenant user | Session |
| PATCH | /v1/account/api-keys/{key_id} | Update API key metadata | Session |
| POST | /v1/account/api-keys/{key_id}/activate | Activate a pending API key and issue its secret | Session |
| POST | /v1/account/api-keys/{key_id}/revoke | Revoke an API key | Session |
| POST | /v1/account/api-keys/{key_id}/rotate | Rotate an active API key secret | Session |
| GET | /v1/account/balance | Read the active tenant CNY balance | Session |
| GET | /v1/account/ledger | List immutable entries for the active tenant CNY balance | Session |
| GET | /v1/account/messages | List the current user's in-app messages | Session |
| POST | /v1/account/messages/{event_id}/delivered | Mark an in-app message delivered | Session |
| POST | /v1/account/messages/{event_id}/read | Mark an in-app message read | Session |
| GET | /v1/account/mfa | Read the authenticated account's current MFA state | Session |
| POST | /v1/account/mfa/disable | Disable active MFA after strong reauthentication | Session |
| POST | /v1/account/mfa/enrollments | Begin TOTP enrollment | Session |
| POST | /v1/account/mfa/enrollments/{credential_id}/activate | Activate a pending TOTP credential | Session |
| POST | /v1/account/mfa/reset | Reset active MFA after strong reauthentication | Session |
| POST | /v1/account/mfa/step-up-proofs | Create a short-lived bound step-up proof | Session |
| GET | /v1/account/notification-subscriptions/{event_type} | Read the current user's event subscription | Session |
| PUT | /v1/account/notification-subscriptions/{event_type} | Update the current user's event subscription | Session |
| GET | /v1/account/order-users | Search active users for order entry | Session |
| GET | /v1/account/orders | List tenant consumption records | Session |
| POST | /v1/account/orders | Enter an audited compatibility order record | Session |
| PATCH | /v1/account/orders/{id} | Edit an audited compatibility order record | Session |
| DELETE | /v1/account/orders/{id} | Archive an audited compatibility order record | Session |
| POST | /v1/account/password | Re-authenticate and change the current tenant user's password | Session |
| GET | /v1/account/profile | Get the current tenant user's profile | Session |
| PATCH | /v1/account/profile | Update the current tenant user's profile | Session |
Contract file：api/openapi/v1/control.yaml api/control-announcements.openapi.yaml api/control-mfa.openapi.yaml api/control-notifications.openapi.yaml api/control-account-orders.openapi.yaml