Consultants API

المستشارين — people members can book, each with a link out (linkUrl).

Plan: every route needs the consultants feature (403 FEATURE_NOT_AVAILABLE).

Who reads what: GET / accepts an optional token.

• approved member → every ACTIVE consultant;
• guest or signed-in non-member → only consultants with isGuestVisible: true, and only when the community exposes consultants to guests; otherwise an empty page. A token alone is not membership. createdBy and the creator's email are removed for guests.
• deactivated consultants (isActive: false) are visible only to consultants:manage — on the list (?isActive=false is ignored for anyone else) and on GET /{id} (404).

Who writes: consultants:manage only, and not while restricted from media or suspended (403 RESTRICTION_BLOCKED). Uploads count against the storage quota. communityId in the body is optional; if sent it must equal the path's (400 COMMUNITY_MISMATCH).

6 endpoints.

GET /api/communities/{communityId}/consultants

Auth: optional — a token changes what you can see (see "Who may read what").

Parameters

Responses

POST /api/communities/{communityId}/consultants

Auth: Bearer JWT required.

Parameters

Request body (required) — multipart/form-data

Type: ConsultantWriteForm

Responses

DELETE /api/communities/{communityId}/consultants/{id}

Auth: Bearer JWT required.

Parameters

Responses

GET /api/communities/{communityId}/consultants/{id}

Auth: Bearer JWT required.

Parameters

Responses

PUT /api/communities/{communityId}/consultants/{id}

Send only the fields to change. Also accepts isActive, sortOrder, and removeIcon / removeBanner = 'true'. Auth: Bearer JWT required.

Parameters

Request body — multipart/form-data

Type: ConsultantWriteForm

Responses

POST /api/communities/{communityId}/consultants/reorder

Auth: Bearer JWT required.

Parameters

Request body (required) — application/json

Responses