---
title: "Identify the account, workspace, and credential in use"
method: GET
path: "/v1/auth/session"
tags: ["Authentication"]
---

# Identify the account, workspace, and credential in use

`GET /v1/auth/session`

## Request

- Base URL: `https://api.masko.ai`
- URL: `https://api.masko.ai/v1/auth/session`
- Auth: HTTP bearer

Returns the account, workspace and credential that authenticated this request. Use it to check which key an integration is using.

## Response `200`

Authenticated identity.

- object
  - `data` object, required
    - `user_id` string, uuid, required
    - `email` string
    - `organization_id` string, uuid, nullable, required
    - `permissions` 'read' | 'write' | 'admin', required
    - `method` 'browser' | 'api_key', required
    - `session_id` string, uuid, nullable, required

## Other responses

- `401`: Expired, revoked, or missing credential.
- `403`: Restricted credential.
- `503`: Account unavailable.

---

[API](https://skmtc.dev/masko/apis/masko-api.md) · [All operations](https://skmtc.dev/masko/apis/masko-api/llms.txt) · [OpenAPI document](https://skmtc.dev/masko/apis/masko-api/revisions/84832e255613?raw)