Current user

Get the current user and their organizations

Returns the current user and their organizations. The result is the profile of whoever the credential belongs to, plus one entry per organization they are an active member of, each carrying that org's roles, teams and effective permissions. Call this first: it is how a client learns which organization ids it may put in X-Organization-Id and which actions to offer. With an org API token this still returns the token owner's memberships, so read organizations rather than assuming the token's org is the only one.

get/user/me

Request

  • Base URL: https://api.elaichi.ai
  • URL: https://api.elaichi.ai/user/me
  • Auth: HTTP bearer

Response

OK

idstring

User id (usr_…).

emailstring email
namestring nullable
avatar_urlstring nullable
is_activeboolean

Inactive accounts cannot authenticate at all.

is_staffboolean

True only for Elaichi support accounts. Always false for customer members; unrelated to organization roles.

last_login_atstring date-time nullable
created_atstring date-time
updated_atstring date-time
mfa_enabledboolean

True when TOTP is active on this account.

mfa_setup_requiredboolean

True when THIS session would be refused (403 mfa_setup_required) in at least one organization the user belongs to, because the organization requires a second factor and the session has not shown one. Always false for an API token. A client routes the person to second-factor setup on this rather than working out which organizations require one.

mfa_setup_required_org_idsstring[]

The organizations behind mfa_setup_required: a bounded page (at most 50), with the organization named by the current_org_id query parameter first when it is one of them. Not the whole set — mfa_setup_required_org_count is the true number; an organization not listed still refuses with 403 mfa_setup_required when entered.

mfa_setup_required_org_countinteger

How many organizations refuse this session for lack of a second factor.

can_disable_mfaboolean

false while an organization the user belongs to requires a second factor and they hold no passkey — turning the authenticator app off (DELETE /user/me/mfa/totp) is refused with 409 mfa_required_by_organization. The reason is in mfa_disable_blocked_reason.

mfa_disable_blocked_reasonstring nullable

A sentence saying why can_disable_mfa is false, or null.

is_root_org_staffboolean

True only for Elaichi support accounts. Always false for customer members.

Changes

No recorded changes to this operation across all 1 revision of this API.