Get Authenticated User
GET/api/auth/user
Returns the currently authenticated user's profile. The features object reports per-tenant feature flags (e.g. features.granular_permissions — whether granular role/permission enforcement is enabled for the tenant; false when the flag is off or unset).
Authentication: Requires Bearer token.
Request
Responses
- 200
- 401
- 403
- 429
OK
Unauthenticated — the bearer token is missing, revoked, expired, or malformed. Never retry automatically; fix the credential. See the Errors guide.
Forbidden — the token lacks a required scope, the endpoint is not available to API tokens, or the user behind the token lacks the permission. A human must adjust the token scopes or user permissions; do not retry.
Rate limited — platform limit is 1,000 requests/min; individual tokens may carry lower limits. Honor the Retry-After header before retrying. See the Rate Limits guide.