> ## Documentation Index
> Fetch the complete documentation index at: https://help.xitter.space/llms.txt
> Use this file to discover all available pages before exploring further.

# Admin panel

> Manage users, settings and content at /admin.

The admin panel lives at `/admin`. Make the first admin with:

```sh theme={null}
bun scripts/make-admin.ts <name>
```

## Sections

| Section | What it does |
| - | - |
| Users | Standing (restrict, limit, suspend), badges, translator globes, roles, notes, sessions. |
| Organisations | Organisations and their affiliates. |
| Posts and reports | Review reports, hide posts and articles, mark media sensitive. |
| Invites | Make invite codes for sign-up. |
| Settings | Instance name, sign-up mode, features, limits, rules (shown at `/rules`), logos, source link, maintenance mode, blocked phrases, trends, a pinned post. |
| Feature switches | Set any of the client's own feature switches for everyone. |
| Announcements | Messages for everyone on the instance. |
| Topics | Topics with keywords that people can follow. |
| Explore cards | News and sports cards at the top of Explore. Sports cards are scoreboards you update as the game goes. |
| Stickers | Sticker packs for the composer. |
| Branded hashtags | Custom like animations and hashtag emoji for a set time. |
| Email | Send a test mail and see every mail tried. |
| Federation | Your instance's list entry, sync status and defederation. See [Federation](/federation/moderating). |
| Client apps | Tokens that label posts with an app name. |
| Staff permissions | What moderators and support staff can do. |
| Audit log | Staff actions. |

## Badges

* Blue: verified account.
* Gold: organisation.
* Grey: government organisation or official.
* Translator globes: blue for translator, gold for translator moderator, yellow for approver.

## Staff roles

There are three staff roles: admin, moderator and support. Admin > Staff permissions turns each permission (changing standing, deleting posts, editing profiles, resetting passwords, and so on) on or off for moderators and support. It also controls who sees IP addresses, email addresses, invite codes and server errors.

## Staff labels

Staff can put X's labels under posts:

* Visibility limited (also kept out of For you and search)
* Misleading
* Stay informed
* Get the latest
* Legally required notice

Staff can also set the counts a post or profile shows.

## Client apps

A post's page shows the app it came from after its time, for example "11:21 PM · Oct 14, 2026 · Xitter for Web".

Admins create and revoke app tokens under **Client apps**, with a label such as `Xitter for Android`. The token is shown once; the database stores its SHA-256 hash. The app sends it as `Authorization: Bearer <token>` alongside the user's session cookies and CSRF header. It names the app, not the user, and grants no account access.

Revoking a token rejects later requests using it. Posts made with it keep their label. Requests from the browser client are labelled `Xitter for Web`, and posts made through the [public API](/api/overview) show `Xitter API`.

## Import from X

Import from X is off by default. Turn it on in Admin > Settings, feature switches. By default only accounts a week old can import, and staff approve each import first (Admin > Settings, Import from X).

## Debugging

`GET /_debug/unknown` (admins only) lists the client calls no handler answers yet, most frequent first. Start there when a screen is empty.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.