Access tokens
Revoke access token
RevokeAccessToken stops one working. A Member may revoke their own; an Admin may revoke anybody's, because a key somebody left in a door is the Instance's problem.
curl -X DELETE "https://example.com/api/v1/access-tokens/string"{}List access tokens
ListAccessTokens returns the signed-in Member's own tokens.
Add member
AddMember creates an account with a temporary password, which is read out once. Nooks has no mail server, so an Admin hands the password over in person or however else they already talk. The Member must replace it before anything else.