Skip to content

Get authenticated user info

GET
/api/v1/me
curl --request GET \
--url https://your-orimora-instance.example.com/api/v1/me \
--header 'Authorization: Bearer <token>'

Returns identity and permission data for the caller. Used by integrations (n8n, MCP clients, custom bots) to validate credentials and discover what the caller is allowed to do.

The role field is deprecated (ADR 0004). New integrations MUST gate on capabilities instead. The field will be removed in v0.2.0; the endpoint itself remains.

Sunset is signalled via response headers:

  • Sunset: Sun, 15 Nov 2026 00:00:00 GMT (RFC 8594)
  • Link: <ADR URL>; rel="deprecation"; type="text/html" (RFC 8288)

Authenticated user info

Media type application/json
object
data
required
object
id
required
string format: uuid
name
required
string
email
required
string format: email
teamId
required
string format: uuid
role
required

DEPRECATED — computed from capabilities via computeLegacyRole(). Use capabilities instead. Removed in v0.2.0. Mapping: settings.team_edit or system-admin → admin; document.create → member; otherwise viewer.

string
Allowed values: admin member viewer
capabilities
required

Granted capabilities for this user/team. System admins receive [”*”]. Use these to gate integration behaviour instead of role.

Array<string>
Example
{
"data": {
"role": "admin"
}
}
Sunset
string
Example
Sun, 15 Nov 2026 00:00:00 GMT

RFC 8594 — planned removal date of the role field (IMF-fixdate)

Link
string
Example
<https://github.com/defcon1702/orimora/blob/main/adr/0004-role-to-capabilities-migration.md>; rel="deprecation"; type="text/html"

RFC 8288 — link to the ADR describing the capabilities migration

Unauthorized

Media type application/json
object
error
required

Human-readable error message

string
Example generated
{
"error": "example"
}