---
title: "Read the current browser session and CSRF token"
method: GET
path: "/v1/auth/session"
tags: ["Browser identity"]
---

# Read the current browser session and CSRF token

`GET /v1/auth/session`

## Request

- Base URL: `https://api.supplyslate.com`
- URL: `https://api.supplyslate.com/v1/auth/session`
- Auth: none required

## Response `200`

Successful response

- SessionResponse
  - `authenticated` boolean, required
  - `user` User
    - `id` string, required
    - `email` string, email
    - `display_name` string
  - `organization` Organization
    - `id` string, required
    - `name` string
    - `slug` string
    - `type` 'buyer' | 'supplier' | 'operator'
  - `role` 'buyer' | 'supplier' | 'operator'
  - `csrf_token` string
  - `expires_at` string, date-time

## Other responses

- `400`: Invalid request
- `401`: Authentication required
- `403`: Scope or tenant boundary denied
- `404`: Resource not found
- `409`: State conflict or idempotency mismatch
- `429`: Rate limited

---

[API](https://skmtc.dev/supplyslate/apis/supplyslate-agent-native-supply-api.md) · [All operations](https://skmtc.dev/supplyslate/apis/supplyslate-agent-native-supply-api/llms.txt) · [OpenAPI document](https://skmtc.dev/supplyslate/apis/supplyslate-agent-native-supply-api/revisions/f7989551f167?raw)