API Reference.
The website and analyzer both talk to Ghost only through this REST surface.
| Method | Path | Min role | Description |
|---|---|---|---|
| POST | /api/login | — | Exchange username/password for a bearer token. |
| GET | /api/status | — | Product, framework, uptime. |
| GET | /api/players | read_only | Connected players + trust score. |
| GET | /api/detections | read_only | Full detection log (rolling). |
| GET | /api/bans | read_only | Active bans. |
| POST | /api/bans/unban | administrator | { identifier } — remove ban. |
| GET | /api/trust | read_only | Trust scores per identifier. |
| GET | /api/logs | read_only | System logs. |
| GET | /api/settings | read_only | Current effective config. |
| POST | /api/settings | owner | Patch config (deep merge). |
| GET | /api/admins | administrator | List admin records. |
| POST | /api/admins/upsert | owner | { identifier, role, bypasses[] }. |
| GET | /api/check/:id | — | Public ban checker. |