---
title: "Get authenticated caller"
method: GET
path: "/me"
tags: ["Identity"]
---

# Get authenticated caller

`GET /me`

Returns the user row, role row, and resolved permission list for the authenticated caller, derived from the auth context's own `auth_lookup_by_cognito_id`. Unlike `GET /users/{id}` and `GET /roles`, this endpoint is keyed to the JWT (not to the currently viewed organization), so it works for super-admins whose user/role rows live in the cluster-internal org but who are viewing a different tenant. Authenticated callers always have permission to read their own identity, so the route is not gated by a `Requires(...)` permission check.

## Response `200`

Success

- object
  - `data` object, required
    - `user` User, required
      - `id` string, uuid, required
      - `actorId` string, uuid, required
      - `cognitoId` string, required
      - `firstName` string, required
      - `lastName` string, required
      - `email` string, required
      - `phone` string
      - `avatarUrl` string
      - `status` 'active' | 'invited' | 'deactivated', required
      - `invitedAt` number, nullable
      - `joinedAt` number, nullable
      - `deletedAt` number, nullable, required
      - `createdAt` number, required
      - `updatedAt` number, required
    - `role` Role, required
      - `id` string, uuid, required
      - `organizationId` string, uuid, nullable — NULL for global roles (e.g. super-admin)
      - `slug` string, nullable — Stable identifier for the super-admin role
      - `name` string, required
      - `description` string, required
      - `permissions` Permission[], required
        - `resource` 'sites' | 'missions' | 'media' | 'organization' | 'users' | 'roles' | 'billing' | 'developer' | 'events' | 'transactions', required
        - `level` 'none' | 'read' | 'write', required
      - `isSystem` boolean, required
      - `canSwitchOrganizations` boolean, required
      - `deletedAt` number, nullable, required
      - `createdAt` number, required
      - `updatedAt` number, required
    - `permissions` Permission[], required
      - `resource` 'sites' | 'missions' | 'media' | 'organization' | 'users' | 'roles' | 'billing' | 'developer' | 'events' | 'transactions', required
      - `level` 'none' | 'read' | 'write', required

## Other responses

- `401` — Authentication required
- `404` — Resource not found
- `500` — Internal server error

---

[API](https://skmtc.net/voltairlabs/apis/voltair-api.md) · [All operations](https://skmtc.net/voltairlabs/apis/voltair-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/voltairlabs/voltair-api/revisions/be08f4f706f5/schema)