---
title: "Get current authenticated user"
method: GET
path: "/users/me"
tags: ["Users"]
---

# Get current authenticated user

`GET /users/me`

Retrieve the current authenticated user's profile information.

This endpoint returns comprehensive user information including:
- Basic profile data (name, email, phone)
- Organization details and affiliates
- User roles and permissions
- Profile settings and preferences
- Associated files and documents

**Authentication Required**: Yes

**Returns**: Detailed user profile with organization relationships

## Query parameters

- `id` string
- `id__in` string
- `organization` string
- `organization__in` string
- `referring_user` string
- `referring_user__in` string
- `current_sign_in_at__gt` string
- `current_sign_in_at__lt` string
- `current_sign_in_at__lte` string
- `current_sign_in_at__gte` string
- `search` string
- `lineage` string
- `roles` string
- `role` string
- `has_team` string
- `no_team_incident` string
- `sort` 'created_at' | '-created_at' | 'updated_at' | '-updated_at'
- `recent_phone_users` string
- `team_ids` string
- `equipment` string
- `limit` integer
- `offset` integer

## Response `200`

OK

- CurrentUser
  - `id` integer
  - `email` string, email — User's email address (used for login and communications)
  - `permissions` object — Complete permissions mapping for the user based on roles
  - `first_name` string — User's first name
  - `last_name` string — User's last name
  - `states` string — Geographic states/regions where user is authorized to work
  - `preferences` object — User preferences and application settings
  - `internal_state` object, nullable — Internal state for limits, quotas, and admin-managed settings. Admin-only field.
  - `organization` UserProfileOrganization — User's primary organization with complete affiliate information
    - `id` integer
    - `name` string, required — Name of the organization.
    - `is_active` boolean, nullable — Indicates whether the organization is active. If false, the organization and its users lose access to all incidents.
    - `roles` string — User-specific roles within this organization
    - `type_t` string, nullable — Translated string indicating the type of organization.
    - `affiliates` string — List of organization IDs that are direct affiliates of this organization
    - `all_affiliates_and_groups` string — Complete list of related organization IDs including affiliates and group members
    - `primary_location` integer, nullable — The primary area in which the organization operates, granting increased access to survivor data.
    - `secondary_location` integer, nullable — The secondary areas in which the organization operates, used for receiving alerts outside the primary working area.
  - `roles` integer[] — Roles associated with the user.
  - `active_roles` string
  - `pending_roles` string
  - `mobile` string, nullable — User cell phone number.
  - `social` object, nullable — Social media account information.
  - `lineage` integer[], nullable — Lineage of user IDs who referred the current user.
  - `primary_language` integer, nullable — Primary language of the user.
  - `secondary_language` integer, nullable — Secondary language of the user.
  - `files` FileJoin[] — Files associated with the user (profile images, documents, etc.)
    - `tag` string, nullable — User-generated tag(s) or desription.
    - `title` string, nullable — A user-generated title, such as exterior_front, exterior_rear, interior, basement, friends, headquarters, user manual, tornado path, furthest extent, etc. Note: file_files.title and location_locations.name are the default titles. However, this field allows the user to create their own title if it is shared. It may or may not be implemented.
    - `notes` string, nullable — Any user-specific notes, caption, or description for the file. Note: file_files.notes is the default captions. However, this field allows the user to create their own caption if they wish, e.g. if someone else shares it with them. It may or may not be implemented.
    - `created_at` string, date-time — Timestamp when the file was attached to the object.
    - `file_updated_at` string
    - `id` integer
    - `file` integer, nullable, required — The file.id of the file being attached to object_id.
    - `filename` string
    - `url` string
    - `full_url` string
    - `general_file_url` string
    - `blog_url` string
    - `large_blog_url` string
    - `large_thumbnail_url` string
    - `small_thumbnail_url` string
    - `filename_original` string
    - `file_type_t` string
    - `mime_content_type` string
    - `attr` string
    - `image_exif` string
  - `referring_user` integer, nullable — User who referred this user.
  - `accepted_terms` boolean, nullable — Indicates whether the user has accepted the terms.
  - `accepted_terms_timestamp` string, date-time, nullable — Timestamp when the user accepted the terms.
  - `beta_features` string[] — Beta features the user has access to
  - `approved_incidents` string[] — Incidents the user is approved to work on
  - `mobile_dnis_verified_at` string, date-time, nullable — Timestamp when the dnis (user_users.dnis_id, referencing the sanitized version of user_users.mobile) was verified via text message. Verification must happen whenever a user updates their mobile number. Note: This should be able to happen via text AND phone call. For example, if a phone volunteer changes their number to an office line to take phone calls, a sucessful phone call delivery qualifies as verification.

## Other responses

- `401` — Authentication credentials not provided

---

[API](https://skmtc.dev/crisiscleanup/apis/crisiscleanup-api.md) · [All operations](https://skmtc.dev/crisiscleanup/apis/crisiscleanup-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/crisiscleanup/crisiscleanup-api/revisions/3fa73d4b2895/schema)