Get my profile
Returns the Bearer-authenticated user’s own profile — their id,
name, and email. Identity only: it carries no company concept. To
discover the companies you can act on (and your default company), use
GET /me/companies — its defaultCompanyId is the default-company
pointer.
Unlike every other endpoint, this one is not company-scoped: it
precedes company selection. It is the MCP whoami lookup — the caller
uses it to confirm who they are logged in as.
Authentication: user-principal Bearer only. Send a user-scoped Auth0
access token as Authorization: Bearer <jwt>. An API key is not accepted
here (an API key is scoped to a single company and has no notion of “me”); a
request without a valid user Bearer token returns 401.
Authorizations
User-principal OAuth 2.0 Bearer authentication. Send a user-scoped Auth0 access token (audience = the app API audience) as Authorization: Bearer <jwt>. The request resolves to the user's identity and is authorized by their Role on the {companyId} in the path — the same role-based permissions the web app enforces. This is the path the MCP connector uses to act on a user's behalf; endpoints that accept it list both BearerAuth and ApiKeyAuth.
