Not in the API

• No managing users or passwords
• No billing
• No deleting machines
• No reading a webhook secret back
• No portal tokens (portal_token is not in responses)
• No photo uploads