Skip to main content
The admin panel lives at /admin. Make the first admin with:

​
Sections

​
Badges

  • Blue: verified account.
  • Gold: organisation.
  • Grey: government organisation or official.
  • Translator globes: blue for translator, gold for translator moderator, yellow for approver.

​
Staff roles

There are three staff roles: admin, moderator and support. Admin > Staff permissions turns each permission (changing standing, deleting posts, editing profiles, resetting passwords, and so on) on or off for moderators and support. It also controls who sees IP addresses, email addresses, invite codes and server errors.

​
Staff labels

Staff can put X’s labels under posts:
  • Visibility limited (also kept out of For you and search)
  • Misleading
  • Stay informed
  • Get the latest
  • Legally required notice
Staff can also set the counts a post or profile shows.

​
Client apps

A post’s page shows the app it came from after its time, for example “11:21 PM · Oct 14, 2026 · Xitter for Web”. Admins create and revoke app tokens under Client apps, with a label such as Xitter for Android. The token is shown once; the database stores its SHA-256 hash. The app sends it as Authorization: Bearer <token> alongside the user’s session cookies and CSRF header. It names the app, not the user, and grants no account access. Revoking a token rejects later requests using it. Posts made with it keep their label. Requests from the browser client are labelled Xitter for Web, and posts made through the public API show Xitter API.

​
Import from X

Import from X is off by default. Turn it on in Admin > Settings, feature switches. By default only accounts a week old can import, and staff approve each import first (Admin > Settings, Import from X).

​
Debugging

GET /_debug/unknown (admins only) lists the client calls no handler answers yet, most frequent first. Start there when a screen is empty.