KEkeycardai
Users

Get current user

Changed on

Returns the currently authenticated user in the zone. Requires read access to the resolved user. Returns 404 when the caller has no user record in the zone.

get/zones/{zoneId}/users/me

Request

  • Base URL
    https://docs.keycard.ai (the document declares no server; this is the origin it was published from)
  • URL
    https://docs.keycard.ai/zones/{zoneId}/users/me
  • Auth
    • HTTP bearer
    • or OAuth 2
      Client credentials
      Token URL: /service-account-token

Path parameters

zoneIdstring required

Zone ID

Response

An authenticated user entity

idstring required

Unique identifier of the user

organization_idstring required

Organization that owns this user

zone_idstring required

Zone this user belongs to

identifierstring required

Zone-scoped user identifier. Defaults to the user's Keycard ID. When the provider has user_identifier_claim configured, the value is set from that claim at user creation time.

subjectstring

Subject identifier from the identity provider

issuerstring

Issuer identifier of the identity provider

emailstring email required

Email address of the user

email_verifiedboolean required

Whether the email address has been verified

status'active' | 'disabled' required

Status of the user. Disabled users cannot authenticate.

externalboolean required

Whether the user is synced from an external directory over SCIM. When true the user is directory-owned: status cannot be changed and the user cannot be deleted through this API while the zone has external_sync_enabled set.

provider_idstring

Reference to the identity provider. This field is undefined when the source identity provider is deleted but the user is not deleted.

created_atstring date-time required

Entity creation timestamp

updated_atstring date-time required

Entity update timestamp

authenticated_atstring

Date when the user was last authenticated

session_countinteger

Session count for this user. Populated only when expand[]=session_count is set on the listing endpoint.

grant_countinteger

Delegated-grant count for this user. Populated only when expand[]=grant_count is set on the listing endpoint.

Changes