---
title: "Get user info"
method: POST
path: "/oauth/userinfo"
tags: ["oauth"]
---

# Get user info

`POST /oauth/userinfo`

Get information about the user. Only available through oauth access tokens. Information varies depending on the scope of the oauth app and what permissions the user granted to the oauth app.

## Response `200`

User info

- object
  - `sub` string, required — ID of the user
  - `name` string — Full name of the user
  - `preferred_username` string — Username of the user
  - `profile` string, uri — Profile URL of the user
  - `picture` string, uri — Avatar URL of the user
  - `website` string, uri — Website of the user
  - `email` string — Email of the user
  - `email_verified` boolean — Whether the email is verified
  - `isPro` boolean, required — Whether the user is a Pro user
  - `canPay` boolean — Whether the user has access to billing. You should check `canPay` first.
  - `billingMode` 'prepaid' | 'postpaid' — Whether the user is on prepaid or postpaid billing
  - `orgs` object[], required
    - `sub` string, required — ID of the organization
    - `name` string, required — Name of the organization
    - `picture` string, uri, required — Avatar URL of the organization
    - `preferred_username` string, required — Username of the organization
    - `plan` 'team' | 'enterprise' | 'plus' | 'academia'
    - `canPay` boolean
    - `billingMode` 'prepaid' | 'postpaid'
    - `roleInOrg` union
      - 'admin' | 'write' | 'contributor' | 'read' | 'no_access'
      - string — Custom role name
    - `securityRestrictions` string[] — Current security restrictions for accessing data in this organization with current authentication method
    - `resourceGroups` object[]
      - `sub` string, required
      - `name` string, required
      - `role` union, required
        - 'admin' | 'write' | 'contributor' | 'read' | 'no_access'
        - string — Custom role name

## Changes

- **2026-07-26** `36390f25f00f` — 2 warning
  - removed the optional property `orgs/items/missingMFA` from the response with the `200` status
  - removed the optional property `orgs/items/pendingSSO` from the response with the `200` status

[Change history](https://skmtc.dev/huggingface/apis/hub-api-endpoints/changes/oauth/userinfo/post.md)

---

[API](https://skmtc.dev/huggingface/apis/hub-api-endpoints.md) · [All operations](https://skmtc.dev/huggingface/apis/hub-api-endpoints/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/huggingface/hub-api-endpoints/revisions/5fe52e4e47c8/schema)