---
title: "Get your current access"
method: GET
path: "/identity/access_summaries/current"
tags: ["identity", "access", "customer-session"]
---

# Get your current access

`GET /identity/access_summaries/current`

## Request

- Base URL: `https://api.stablesea.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.stablesea.com/identity/access_summaries/current`
- Auth: none declared

Returns your business, your individual id, the business's authorization mode, your role, exactly the capabilities you hold, the roles you may assign, an authorization revision, and the members who can grant you access. Reachable before the business accepts its terms. A read failure is a 500, never a 403 or an empty grant. Requires a signed-in business session.

## Response `200`

OK

- AccessSummaryOutput
  - `administrator_contacts` AccessAdministratorContact[], required: The members who can grant access. Empty unless administrator_contacts_status is available.
    - `email` string, required
    - `name` string, required
  - `administrator_contacts_status` 'available' | 'unavailable' | 'withheld', required
  - `assignable_roles` AccessAssignableRole[], required: The roles the caller may assign. Empty in a legacy business and for a caller who cannot delegate.
    - `administering` CapabilitiesAtom[], required: The role's capabilities that administer access. The caller holds each one.
    - `id` string, required: A preset's name, such as admin, or a custom role's id.
    - `kind` 'preset' | 'custom', required
    - `name` string, required: The role's name as members read it.
    - `performing` CapabilitiesAtom[], required: The role's capabilities that perform an action.
    - `revision` integer, required: The role revision whose capabilities apply.
  - `authorization_revision` string, required: Opaque; compare for equality only. It is the caller's own: it changes when the mode, the caller's membership, role or role revision, or their legacy permissions change.
  - `capabilities` CapabilitiesAtom[], required: Exactly the capabilities the caller holds, in catalog order. In a legacy business, the caller's permission bits mapped to capabilities.
  - `group_id` string, required
  - `individual_id` string, required
  - `membership` 'active' | 'ended', required
  - `mode` 'legacy' | 'enforced', required
  - `payee_details` 'full' | 'masked', required
  - `role` AccessRole, nullable, required
    - `id` string, required: A preset's name, such as admin, or a custom role's id.
    - `kind` 'preset' | 'custom', required
    - `name` string, required: The role's name as members read it.
    - `revision` integer, required: The role revision whose capabilities apply.

## Other responses

- `401`: Unauthorized
- `403`: Forbidden
- `default`: Error response.

## Changes

- **2026-10-29** `e003c8a67b62`: 3 info
  - added the optional property `error/authorization` to the response with the `401` status
  - added the optional property `error/authorization` to the response with the `403` status
  - added the optional property `error/authorization` to the response with the `default` status
- **2026-10-29** `423f3ae9eca6`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/stablesea/apis/stable-sea-backend/changes/identity/access_summaries/current/get.md)

---

[API](https://skmtc.dev/stablesea/apis/stable-sea-backend.md) - [All operations](https://skmtc.dev/stablesea/apis/stable-sea-backend/llms.txt) - [OpenAPI document](https://skmtc.dev/stablesea/apis/stable-sea-backend/revisions/6f5456d6453c?raw)