GET /api/admin/support/tickets/:id (support.read): the ticket and its thread (inbound mail as text) plus the staff directory for the assignee picker; can.school shows "Approve as school" (§16). ?html=<messageId> returns that inbound message's stored HTML instead, which the desk shows only inside a sandboxed, network-less iframe.Staff cookie session; permission support.read.Source snapshot: admin/src/app/api/admin/support/tickets/[id]/route.ts. This reference describes the current working tree, not proof of deployment. The response service types and validators remain authoritative.
Request
Authorization
API Key
Add parameter in cookie
__Host-hwa_session
Example:
__Host-hwa_session: ********************
or
Path Params
Query Params
Responses
🟢200
application/json
GET /api/admin/support/tickets/:id (support.read): the ticket and its thread (inbound mail as text) plus the staff directory for the assignee picker; can.school shows "Approve as school" (§16). ?html=<messageId> returns that inbound message's stored HTML instead, which the desk shows only inside a sandboxed, network-less iframe.