Get the current user's complete information

GEThttps://api.veriko.mx/v1/users/me

Audience: public
Auth: API key
Permission: users:read_self

Returns the authenticated user's complete information: profile + API key metadata + active subscription + 2FA state + role permissions + notifications summary. One roundtrip replaces the multiple calls the dashboard used to make to /auth/profile, /billing/subscription and /notifications/unread-count.

Request

cURLPython•JavaScript•PHP•

curl -X GET 'https://api.veriko.mx/v1/users/me' \
  -H 'Authorization: Bearer veriko_••••'

Python example — coming soon.

JavaScript example — coming soon.

PHP example — coming soon.

**Response 200**`UserMeBundle` — Complete information for the authenticated user.
Field	Type	Description
`id`	`string (uuid)`	Unique user identifier (UUID v7). e.g. `b1e4a2c3-1234-4abc-8def-000000000001`
`email`	`string (email)`	User email, used for login and notifications. e.g. `[email protected]`
`name`	`string`	User's display name as shown in the dashboard. e.g. `Carlos Lopez`
`role`	`string`	User's role in the organization. Determines available permissions. `owner` — account owner; `admin` — administers it; `user` — uses it; `viewer` — read-only. e.g. `user`
`status`	`string`	Account status. Only `active` allows API operations. `suspended` — account suspended; `pending_verification` — the email is still unverified. e.g. `active`
`timezone`	`string`	User's IANA timezone, used to format timestamps in the UI. e.g. `America/Mexico_City`
`language`	`string`	User's preferred language for UI and notifications. `es` for Spanish, `en` for English. e.g. `es`
`email_verified_at`	`string \| null`nullable	ISO 8601 UTC timestamp when the user verified their email. `null` if pending. e.g. `2026-04-30T10:15:00Z`
`created_at`	`string (date-time)`	ISO 8601 UTC timestamp when the account was created. e.g. `2026-01-15T08:00:00Z`
`api_key`	`object \| null`nullable	API key metadata. Never returns the full key (use POST /v1/users/me/api-key/reveal with password to reveal).
`prefix`	`string`	API key prefix for visual identification. Does not include the full key. e.g. `example_a1b`
`last_4`	`string \| null`nullable	Last 4 characters of the API key for masked rendering (`veriko_a1b••••••f9c2`). `null` for accounts predating that field, until it is backfilled. e.g. `f9c2`
`subscription`	`object \| null`nullable	User's active subscription. `null` if no active plan.
`plan_slug`	`string`	Identifier of the subscribed plan (free, pro, enterprise, etc.). e.g. `pro`
`status`	`string`	Current subscription status per the billing cycle. `active` — up to date; `trialing` — in trial; `past_due` — a charge is outstanding; `canceled` — cancelled; `paused` — paused. e.g. `active`
`current_period_end`	`string \| null`nullable	End of the current billing period (ISO 8601 UTC). e.g. `2026-06-15T00:00:00Z`
`cancel_at`	`string \| null`nullable	Scheduled cancellation date if the user initiated cancel-at-period-end. `null` if no cancellation is pending. e.g. `null`
`billing_interval`	`string \| null`nullable	Billing frequency of the subscribed plan. `month` bills monthly, `year` yearly, and `once` marks a one-off charge with no renewal. e.g. `month`
`two_factor`	`object`	Two-factor authentication state.
`enabled`	`boolean`	`true` if the user has 2FA enabled. e.g. `false`
`method`	`string \| null`nullable	OTP delivery channel. `null` if 2FA is disabled. `sms` sends the code by text message; `email`, by mail. e.g. `sms`
`last_used_at`	`string \| null`nullable	Last successful 2FA use. Future field, currently always `null`. e.g. `null`
`permissions`	`array`	Flat list of the user's role permissions in `resource:action` format.
`notifications`	`object`	Summary of the user's notification queue.
`unread_count`	`integer`	Number of unread, non-archived notifications. e.g. `3`
`push_enabled`	`boolean`	`true` if the user has at least one active push subscription. e.g. `false`
`telegram_linked`	`boolean`	`true` if the user has a linked Telegram chat. e.g. `false`
`_warnings`	`array`	List of subsystems that failed while building this bundle. Only present when partial failures occurred. The fields corresponding to each failed subsystem will be at their default value (null or empty). Allows the client to degrade gracefully instead of going dark. e.g. `["subscription_unavailable"]`

**Response status codes**`GET /v1/users/me`
Status	Class	Description	Body
200	`2xx`	Complete information for the authenticated user.	No body
401	`4xx`	Authentication is required or the provided credentials are invalid.	`ErrorResponse`

**Errors from `GET /v1/users/me`**
Status	Code	Example
401	`unauthorized`	Invalid or missing authentication credentials. Envelope meta.request_id `c4d5e6f7a8b9`