---
title: "Current principal, organizations and scopes"
method: GET
path: "/me"
tags: ["Identity"]
---

# Current principal, organizations and scopes

`GET /me`

## Request

- Base URL: `https://hostingsurge.com/api/v1`
- URL: `https://hostingsurge.com/api/v1/me`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `__Host-hs_session`

## Response `200`

The caller

- object
  - `user` object, nullable, required: null for token principals without a user
    - `id` string, uuid, required
    - `name` string, required
    - `email` string, required
  - `principal` 'session' | 'api_token' | 'mcp_token', required
  - `organizations` object[], required
    - `id` string, uuid, required
    - `name` string, required
    - `role` 'owner' | 'admin' | 'developer' | 'billing' | 'editor' | 'viewer', required
    - `plan` string, nullable, required
    - `freePlan` object, nullable: the state of a Free team (migration 203); absent for paid, granted and owner teams
      - `status` 'ok' | 'site_limit' | 'upgrade_needed' | 'paused', required
      - `upgradeUrl` string, required: where the team upgrades (Settings → Billing), relative to the dashboard origin
  - `scopes` string[], required: effective scopes for token principals; role-derived scopes for sessions
  - `isOperator` boolean, required: Always false. Kept for compatibility: whether an account is a platform operator is never disclosed to a customer session, key or token; the operator console has its own sign-in (docs/OPERATOR.md "Admin sign-in")

## Other responses

- `400`: Invalid request (code invalid_request)
- `401`: Missing or invalid session/token (code unauthorized)
- `403`: Authenticated but not permitted (code forbidden)
- `404`: Not found or not visible to the caller (code not_found)
- `409`: Conflicting state (code conflict)
- `429`: Too many requests (code rate_limited); see Retry-After
- `503`: Hosting engine unavailable (code provider_unavailable)

---

[API](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api.md) · [All operations](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/revisions/4d08337cdff1?raw)