See GET /openapi.json. GET /auth/provider discovers the browser-facing PrivateID site; POST /auth/privateid exchanges an audience-bound proof for a local session. GET /auth/capabilities, POST /auth/logout, and GET /customers/me manage that independent session.
Customer routes manage profiles, interests, discovery, relationships, groups, likes/passes/favorites/hides/mutes, matches, compatibility consent, messages, blocks, reports, privacy, plans, and billing. Raw coordinates are not accepted or returned.
Moderation routes list and decide reports and appeals. Administration exposes overview, customers, local role assignment, and audit only to the corresponding Relationship Network roles. All protected routes re-check the bearer session and role at the API boundary.