---
title: "Get the authenticated identity"
method: GET
path: "/v1/me"
tags: ["Account"]
---

# Get the authenticated identity

`GET /v1/me`

## Request

- Base URL: `https://api.spacefast.com`
- URL: `https://api.spacefast.com/v1/me`
- Auth: HTTP bearer

Returns the authenticated subject with its tenant grants, team memberships, and per-team plan summary.

## Query parameters

- `teamId` string: Return the plan summary and membership for this team rather than the default one.

## Response `200`

Response for status 200

- object
  - `$schema` string, uri: Canonical JSON Schema URL for this response body. The server also sends it in the `Link: rel="describedby"` response header.
  - `data` object, required
    - `subject` object, required: The authenticated subject of the calling credential.
      - `type` 'user' | 'team' | 'external' | 'system', required: Subject kind: the session user, or the machine credential's acting subject.
      - `id` string, required: Stable subject id.
    - `user` object, nullable, required: Authenticated user identity for user-subject credentials. Null for team-subject or service-subject machine credentials. Creator metadata is retained only for audit attribution, not request identity.
      - `id` string, required: User id.
      - `email` string, nullable, required: User email.
      - `name` string, nullable, required: User display name.
      - `isAutomattician` boolean, required: Whether the linked WordPress.com account is an Automattician.
      - `wpcom` object, nullable: Deprecated compatibility field. Current servers return null; readers accept older provider profiles and responses that omitted this field during the rolling upgrade.
      - `isSuperadmin` boolean, required: Whether the user is a platform operator.
      - `pendingDeletionAt` string, nullable, required: When this account's deletion was requested, while the close is still running. Null for every account that is not being deleted.
      - `dashboardPrefs` object, required: The user's dashboard preferences. Carried on the boot payload the dashboard already fetches, so applying a cross-device preference costs no extra request. Write with `PATCH /v1/me/dashboard-preferences`.
      - `privacy` object, required: The user's account-level privacy choices. Write with `PATCH /v1/me/privacy`.
        - `analyticsOptOut` boolean, required: Opt out of product analytics. When true, no analytics events are recorded for this account, in the browser or server-side.
        - `advertisingOptOut` boolean, required: Do-not-sell/share election (CCPA). When true, the account is excluded from any advertising or audience use.
    - `tenants` object[], required: Tenant grants derived from the credential's effective policy. The credential's home tenant is always included.
      - `id` string, required: Tenant id.
      - `kind` string, required: Tenant kind.
      - `name` string, required: Tenant display name.
      - `access` 'full' | 'scoped', required: Grant level the credential's policy holds in this tenant: `full` covers the whole tenant subtree, `scoped` covers specific principals or resources within it.
    - `teams` object[], required: Teams the credential can act in: session team memberships, or the teams a machine credential's policy grants.
      - `id` string, required: Team id.
      - `tenantId` string, required: Owning tenant id.
      - `name` string, required: Team display name.
      - `slug` string, nullable, required: Team slug.
      - `role` string, nullable, required: The caller's membership role. Null for policy-granted (non-member) access.
      - `plan` 'free' | 'go' | 'plus' | 'gold' | 'enterprise' | 'internal', required: The team's resolved plan code (plan summary).
    - `intercom` object, nullable, required: Intercom Messenger boot payload for authenticated browser sessions.
      - `api_base` string, uri, required: Intercom Messenger API base URL.
      - `app_id` string, required: Intercom workspace app id.
      - `user_id` string, required: Stable Intercom user id.
      - `email` string, email: User email when available.
      - `name` string: User display name when available.
      - `created_at` integer: User creation time in Unix seconds.
      - `company` object: Current team as an Intercom company.
        - `company_id` string, required: Stable Intercom company id.
        - `name` string, required: Company display name.
        - `plan` 'free' | 'go' | 'plus' | 'gold' | 'enterprise' | 'internal': Resolved company plan code.
      - `intercom_user_jwt` string, required: Short-lived server-signed Messenger JWT.
      - `session_duration` integer, required: Messenger session cookie TTL in ms.
      - `expiresAt` string, date-time, required: JWT expiry timestamp.
    - `joinableTeams` object[], required: Teams the user can join without waiting for anyone: a pending invitation or company-domain rule matching any verified email, or Automattician access to the Automattic team. Teams the user already belongs to are not listed.
      - `teamId` string, required: Team id.
      - `name` string, required: Team display name.
      - `slug` string, nullable, required: Team slug.
      - `source` 'invitation' | 'automattician', required: Why the caller can join the team.
      - `domainMatch` boolean: The offer matches a verified company email domain.
    - `beta` object, required: Deprecated. Always `{ gateEnabled: false, enrolled: true, eligibleTeams: [] }`.
      - `gateEnabled` false, required
      - `enrolled` true, required
      - `eligibleTeams` unknown[], required
        - unknown

## Other responses

- `default`: Problem details (RFC 9457). Any 4xx/5xx response is one `application/problem+json` document.

---

[API](https://skmtc.dev/spacefast/apis/spacefast-api.md) · [All operations](https://skmtc.dev/spacefast/apis/spacefast-api/llms.txt) · [OpenAPI document](https://skmtc.dev/spacefast/apis/spacefast-api/revisions/bd165bc7c983?raw)