---
title: "Who this token acts as"
description: "Get the user, their roles, and how the request arrived."
canonical: "https://grid82.com/docs/app-api/me/get"
updated: "2026-11-13"
---

# Who this token acts as

`GET https://your-suite.grid82.app/your-app/v1/me`

Get the user, their roles, and how the request arrived.

> **Note: Generic contract**
>
> Your own version of this operation, with your tables and the fields you can read, is in
> your app's document: `https://{suite}.grid82.app/{app}/v1/openapi.json`, behind your credential.
> [Why each person gets their own](/docs/start/studio-and-runtime#why-an-app-has-an-api-of-its-own).

An API key cannot have more permissions than its user.

Any valid credential for this API: no scope is needed. Operation `me.get`. MCP tool `me_get`. CLI: `grid82 me get` (`npx grid82`).

**Authorizations**

- `Authorization` (bearer, in header, required)

## Response

**200**: Success

- `data` (`object`, required)
- `data.userId` (`string`, required, length: `1–64 chars`)
- `data.email` (`string<email>`, pattern: `^(?:[A-Za-z0-9_'+\-]+\.)*[A-Za-z0-9_'+\-]*[A-Za-z0-9_+-]@(?:[A-Za-z0-9][A-Za-z0-9\-]*\.)+[A-Za-z]{2,}$`)
- `data.roles` (`string[]`, required)
- `data.via` (`enum<string>`, required, one of: `ui, api, cli, mcp, agent, assistant, system, studio, workflow`)
- `data.workflow` (`object`)
- `data.workflow.id` (`string`, required, length: `1–64 chars`)
- `data.workflow.runId` (`string`, required, length: `1–64 chars`)
- `data.workflow.depth` (`integer`, required, range: `0–10`)
- `data.plane` (`enum<string>`, one of: `app, builder`)

```json
{
  "data": {
    "userId": "<string>",
    "email": "<string>",
    "roles": [
      "<string>"
    ],
    "via": "ui",
    "workflow": {
      "id": "<string>",
      "runId": "<string>",
      "depth": 123
    },
    "plane": "app"
  }
}
```

**4XX**: Refused

- `error` (`object`, required)
- `error.code` (`enum<string>`, required, one of: `not_found, forbidden, unauthenticated, validation_failed, conflict, rate_limited, payment_required, not_implemented, internal`)
- `error.message` (`string`, required)
- `error.details` (`Record<string, unknown>`)

```json
{
  "error": {
    "code": "not_found",
    "message": "<string>",
    "details": {}
  }
}
```

**Example request**

```bash
curl --request GET \
  --url 'https://your-suite.grid82.app/your-app/v1/me' \
  --header 'Authorization: Bearer <token>'
```