PATCH /api/admin/schools/:orgId {suspended, cursor?} | {reinvite: true} (schools.manage, step-up); each audited. A status answer with a cursor means students are still being turned off/on: send it back to carry on.Staff cookie session; permission schools.manage; fresh password + TOTP step-up (10 minutes). Write requests need same-origin JSON and X-Admin-CSRF from this session.Source snapshot: admin/src/app/api/admin/schools/[orgId]/route.ts. This reference describes the current working tree, not proof of deployment. The response service types and validators remain authoritative.
Request
Authorization
API Key
Add parameter in cookie
__Host-hwa_session
Example:
__Host-hwa_session: ********************
or
Path Params
Header Params
Body Params application/jsonRequired
Examples
Responses
🟢200
application/json
PATCH /api/admin/schools/:orgId {suspended, cursor?} | {reinvite: true} (schools.manage, step-up); each audited. A status answer with a cursor means students are still being turned off/on: send it back to carry on.