The session's own reach: the caller's principal, and every granted mailbox with the addresses routing into it.

get/v1/me

Request

  • The document declares no server URL.
  • Auth: one of:
    • HTTP bearer
    • API key in cookie __Secure-better-auth.session_token

Response

The request has succeeded.

accessWithdrawnboolean required

Whether the organisation this session's mail resolves to has its access withdrawn. When it has, mailboxes is empty because nothing in that organisation can be opened until an owner or admin restores access from billing — NOT because nothing is granted — and /authorize answers 402.

⛔ The two empties must be told apart by this read. A client that only had the list told a withdrawn founder "nobody has given you a mailbox" (driven live 2026-10-19): the walk skips a withdrawn organisation, so the list is empty either way, and a cold load never asks the token endpoint the question whose 402 would have said so.

Changes

No recorded changes to this operation across all 1 revision of this API.