Get the current user

OpenAPI contract

Method

GET

Path

/api/v1/user/me

Security

jwtBearer (bearer)

Response status

200 400 401 403 429 500

Request and response schemas

JSON

{
  "requestBody": {},
  "responses": {
    "200": {
      "description": "Account profile",
      "content": {
        "application/json": {
          "$ref": "#/components/schemas/UserResponse"
        }
      }
    },
    "400": {
      "description": "Invalid request",
      "content": {
        "application/json": {
          "$ref": "#/components/schemas/RequestError"
        }
      }
    },
    "401": {
      "description": "Authentication required or invalid",
      "content": {
        "application/json": {
          "$ref": "#/components/schemas/SecurityError"
        }
      }
    },
    "403": {
      "description": "Authenticated but not permitted",
      "content": {
        "application/json": {
          "$ref": "#/components/schemas/SecurityError"
        }
      }
    },
    "429": {
      "description": "Rate limit exceeded",
      "content": {
        "application/json": {
          "$ref": "#/components/schemas/SecurityError"
        }
      }
    },
    "500": {
      "description": "Unexpected server error",
      "content": {
        "application/json": {
          "$ref": "#/components/schemas/ApiError"
        }
      }
    }
  }
}

GET /api/v1/user/me is JWT-only. It returns the authenticated profile, including id, username, email, role, creation time, display and workspace settings, plan, sharing preferences, notification settings, two-factor flag, and credit ceiling.

An nfy_ automation key cannot access this endpoint. The response is account data: do not expose it to other users or cache it in shared browser storage. Missing or invalid JWT authentication is rejected.

http

GET /api/v1/user/me
Authorization: Bearer <access token>