Get the current user and their memberships
Returns the current user, their org memberships, the active org, workspaces, and realm roles. Dashboard-only - requires a Keycloak session. External API-key callers get 401.
Headers
X-Workspace-IdSelects the workspace this request operates in, by workspace UUID or slug (e.g. a sandbox workspace for test integrations). Omitted: the organization's default live workspace. Unknown workspace: 404; workspace outside your organization: 403. Discover workspaces via GET /workspaces.
Workspace UUID or slug.
Get the current user and their memberships › Responses
OK
List the current user's enrolled credential types
Returns the credential types the user has enrolled - "password", "otp", "webauthn", "webauthn-passwordless", "recovery-authn-codes". Used by the 2FA settings page to render Connected/Setup state per row. API-key callers receive an empty list (no Keycloak user).
Headers
X-Workspace-IdSelects the workspace this request operates in, by workspace UUID or slug (e.g. a sandbox workspace for test integrations). Omitted: the organization's default live workspace. Unknown workspace: 404; workspace outside your organization: 403. Discover workspaces via GET /workspaces.
Workspace UUID or slug.
List the current user's enrolled credential types › Responses
OK
Get the current caller's effective permissions
Returns the permissions the current request would pass through authorization gates - computed from the JWT claims (Keycloak path) or the API-key all-assignable bundle. The frontend
Headers
X-Workspace-IdSelects the workspace this request operates in, by workspace UUID or slug (e.g. a sandbox workspace for test integrations). Omitted: the organization's default live workspace. Unknown workspace: 404; workspace outside your organization: 403. Discover workspaces via GET /workspaces.
Workspace UUID or slug.
Get the current caller's effective permissions › Responses
OK
Get the current user's dashboard preferences
Returns the authenticated user's dashboard preferences. The row is created with schema defaults on first access.
Headers
X-Workspace-IdSelects the workspace this request operates in, by workspace UUID or slug (e.g. a sandbox workspace for test integrations). Omitted: the organization's default live workspace. Unknown workspace: 404; workspace outside your organization: 403. Discover workspaces via GET /workspaces.
Workspace UUID or slug.
Get the current user's dashboard preferences › Responses
OK
Update the current user's dashboard preferences
Partial update - fields omitted from the body remain unchanged. The locale and timezone fields mirror onto the user profile so the per-request locale resolver sees the new value immediately.
Headers
X-Workspace-IdSelects the workspace this request operates in, by workspace UUID or slug (e.g. a sandbox workspace for test integrations). Omitted: the organization's default live workspace. Unknown workspace: 404; workspace outside your organization: 403. Discover workspaces via GET /workspaces.
Workspace UUID or slug.
Update the current user's dashboard preferences › Request Body
currencydate_formatfirst_day_of_weeklanguagelocalenumber_formatthemetimezoneUpdate the current user's dashboard preferences › Responses
OK