I am creating a custom plugin in nodebb and I want to fetch a list of all authentic and confirmed users over there.
...or does NodeBB make sure all requests and posts to
/admin/* are administrators?
You don't have to. NodeBB core makes sure all requests to those routes are from admins.