---
title: "Who is signed in"
description: "Identify the acting builder, how it arrived (browser session, key, or connected agent), and its scopes."
canonical: "https://grid82.com/docs/builder-api/session/get"
updated: "2026-11-13"
---

# Who is signed in

`GET https://studio.grid82.app/v1/session`

Identify the acting builder, how it arrived (browser session, key, or connected agent), and its scopes.

Organisations and everything below them are available through other routes. This is what `grid82 auth status` checks.

Any valid credential for this API: no scope is needed. Operation `session.get`. MCP tool `session_get`. CLI: `grid82 session get` (`npx grid82`).

**Authorizations**

- `Authorization` (bearer, in header, required)

## Response

**200**: Success

- `data` (`object`, required)
- `data.user` (`object`, required)
- `data.user.id` (`string`, required)
- `data.user.name` (`string,null`, required)
- `data.user.email` (`string`, required)
- `data.via` (`enum<string>`, required, one of: `session, key, oauth, assistant`)
- `data.scopes` (`string[]`, required)

```json
{
  "data": {
    "user": {
      "id": "<string>",
      "name": null,
      "email": "<string>"
    },
    "via": "session",
    "scopes": [
      "<string>"
    ]
  }
}
```

**4XX**: Refused

- `error` (`object`, required)
- `error.code` (`enum<string>`, required, one of: `not_found, forbidden, unauthenticated, validation_failed, conflict, rate_limited, payment_required, not_implemented, internal`)
- `error.message` (`string`, required)
- `error.details` (`Record<string, unknown>`)

```json
{
  "error": {
    "code": "not_found",
    "message": "<string>",
    "details": {}
  }
}
```

**Example request**

```bash
curl --request GET \
  --url 'https://studio.grid82.app/v1/session' \
  --header 'Authorization: Bearer <token>'
```