Tool Factory Admin

Admin access only. Bots can still POST to the API.