---
title: "POST /api/auth/me"
method: POST
path: "/api/auth/me"
tags: ["auth", "internal"]
---

# POST /api/auth/me

`POST /api/auth/me`

## Response `200`

Current user

- ApiResponseUser
  - `data` object — The result payload. Omitted on failure.
    - `email` string, email, required — The user's email address, also their login identifier.
    - `email_settings` EmailSettings — Per-user toggles for the user-pausable email categories. Each field maps 1:1 to a [`PausableCategory`]; required emails are never gated here. Stored as a JSONB blob, so new categories are added as new fields rather than via migration. New fields carry `#[serde(default = "default_true")]` so a category is opted in by default if its key is absent from the stored JSON.
      - `daemon_alerts` boolean — Send an alert when a daemon stops reporting.
      - `discovery_digest` boolean, required — Send a periodic summary of what discovery found.
      - `product_onboarding` boolean — Send getting-started guidance.
      - `trial_and_usage` boolean — Send trial reminders and plan-usage warnings.
    - `email_verified` boolean — Whether the user has verified their email address
    - `has_password` boolean — Whether the user has a password set — computed from password_hash, never stored in DB
    - `network_ids` string[], required — The networks this entity applies to.
    - `oidc_linked_at` string, date-time, nullable — When the account was linked to the identity provider.
    - `oidc_provider` string, nullable — Slug of the identity provider this account signs in through, when linked.
    - `organization_id` string, uuid, required — The organization that owns this record.
    - `permissions` 'Owner' | 'Admin' | 'Member' | 'Viewer', required
    - `terms_accepted_at` string, date-time, nullable — When the user accepted the terms of service.
    - `created_at` string, date-time, required — When this record was first created.
    - `id` string, uuid, required — Server-assigned unique identifier.
    - `updated_at` string, date-time, required — When this record was last modified.
  - `error` string, nullable — Human-readable failure message. Omitted on success.
  - `meta` ApiMeta, required — API metadata included in all responses
    - `api_version` integer, required — API version (integer, increments on breaking changes)
    - `server_version` string, required — Server version (semver)
  - `success` boolean, required — `true` when the request succeeded. `false` responses carry `error` instead of `data`.

## Other responses

- `401` — Not authenticated

---

[API](https://skmtc.net/scanopy/apis/scanopy-api.md) · [All operations](https://skmtc.net/scanopy/apis/scanopy-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/scanopy/scanopy-api/versions/28e466341947/schema)