POST /api/access/admin/demote.PromoteAdminRequest]: it revokes the system-admin grant. Notweb-api derive because the admin surface is part of the documented contract,typescript/mcp set: it is fronted by no MCP tool and consumed by no UI, so those{
"profile_id": "bfcb6779-b1f9-41fc-92d7-88f8bc1d12e8"
}