---
title: "Get current user identity, context, available contexts, and effective permissions"
method: GET
path: "/api/v1/auth/me"
tags: ["Auth"]
---

# Get current user identity, context, available contexts, and effective permissions

`GET /api/v1/auth/me`

Get current user identity, context, available contexts, and effective permissions

## Response `200`

Success

- AuthMeResponse — Response from GET /auth/me with identity, context, and permissions
  - `success` boolean, required — Indicates if the request was successful
  - `data` object, required — Current user identity, context, available contexts, and effective permissions
    - `subject_type` union, required — Type of authenticated subject
      - 'user'
      - 'client'
    - `id` string, uuid, required — Subject ID (user ID or client entity ID)
    - `email` string, email — User email address (present for user subjects)
    - `first_name` string — First name of the user
    - `last_name` string — Last name of the user
    - `current_context` object, nullable, required — Current operating context of the token
      - `type` union, required — Context scope type
        - 'global'
        - 'partner'
        - 'merchant'
      - `id` string, uuid — Scope entity ID (absent for global context)
      - `name` string — Scope entity display name (absent for global context)
      - `branding` object
        - `logo_url` string, nullable, required
        - `icon_url` string, nullable, required
        - `primary_color` string, nullable, required
        - `secondary_color` string, nullable, required
    - `available_contexts` object[], required — All contexts the user can switch to
      - `type` union, required — Context scope type
        - 'global'
        - 'partner'
        - 'merchant'
      - `id` string, uuid — Scope entity ID (absent for global context)
      - `name` string — Scope entity display name (absent for global context)
      - `roles` string[], required — All roles the user has in this context
    - `effective_roles` string[], required — Roles active in the current token
    - `permissions` string[], required — Effective permissions. Contains ["*"] for wildcard access (global admin). Console should check: permissions.includes("*") || permissions.includes(required)

## Other responses

- `401` — Unauthorized

---

[API](https://skmtc.net/banqzinc/apis/quidkey-api.md) · [All operations](https://skmtc.net/banqzinc/apis/quidkey-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/banqzinc/quidkey-api/revisions/f86d2bdbcb08/schema)