Use admin API with admin token.
POST /api/admin/login GET /api/admin/stats POST /api/admin/users/{userId}/credits