# Admin Email Allow List

Administrative endpoints for managing the email domain allowlist used during user registration. When enabled, only email addresses from allowed domains can sign up. Write operations require AdminSettings.Manage permission; read operations require AdminSettings.Read or AdminSettings.Manage permission.

## List email allowed domains

 - [GET /api/v1/admin/email-allow](https://docs.wellesley.social/openapi/admin-email-allow-list/paths/~1api~1v1~1admin~1email-allow/get.md): Retrieves a paginated list of all domains in the email allowlist.

RBAC:
- requires ALL of AdminSettings.Manage
- requires ANY of AdminSettings.Read, AdminSettings.Manage

## Add domain to email signup allowlist

 - [POST /api/v1/admin/email-allow](https://docs.wellesley.social/openapi/admin-email-allow-list/paths/~1api~1v1~1admin~1email-allow/post.md): Adds a domain to the email allowlist. Only emails from allowed domains can register when enabled.

RBAC: requires AdminSettings.Manage

## Remove domain from email signup allowlist

 - [DELETE /api/v1/admin/email-allow/{domain}](https://docs.wellesley.social/openapi/admin-email-allow-list/paths/~1api~1v1~1admin~1email-allow~1%7Bdomain%7D/delete.md): Removes a domain from the email allowlist.

RBAC: requires AdminSettings.Manage