---
title: "Read the current credential authority"
method: GET
path: "/principal"
---

# Read the current credential authority

`GET /principal`

## Request

- Base URL: `https://rendry.io/api/v1`
- URL: `https://rendry.io/api/v1/principal`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer

Account, member role, credential kind/mode and trusted subject resolved from current persisted authority. Selection cannot widen key or embed authority.

## Headers

- `X-Rendry-Account` string

## Response `200`

Read the current credential authority

- Principal
  - `actor_id` string, required
  - `account_id` string, required
  - `role` 'owner' | 'admin' | 'editor' | 'viewer', required
  - `credential_kind` 'browser' | 'oauth' | 'api_key' | 'embed', required
  - `credential_id` string
  - `credential_mode` 'live' | 'test', required
  - `trusted_subject` string: Only for an embed credential; authenticated customer subject, never the X-End-User analytics header.
  - `capabilities` PrincipalCapabilities, required
    - `read` boolean, required
    - `edit` boolean, required
    - `render` boolean, required
    - `manage_account` boolean, required
    - `publish` boolean, required

## Other responses

- `400`: Typed refusal with a stable error code.
- `401`: Typed refusal with a stable error code.
- `403`: Typed refusal with a stable error code.
- `404`: Typed refusal with a stable error code.
- `409`: Typed refusal with a stable error code.
- `429`: Typed refusal with a stable error code.

---

[API](https://skmtc.dev/rendry/apis/rendry-api.md) · [All operations](https://skmtc.dev/rendry/apis/rendry-api/llms.txt) · [OpenAPI document](https://skmtc.dev/rendry/apis/rendry-api/revisions/c4fb572c26c9?raw)