Skip to main content
GET
List my accessible companies

Authorizations

Authorization
string
header
required

User-principal OAuth 2.0 Bearer authentication. Send a user-scoped Auth0 access token (audience = the app API audience) as Authorization: Bearer <jwt>. The request resolves to the user's identity and is authorized by their Role on the {companyId} in the path — the same role-based permissions the web app enforces. This is the path the MCP connector uses to act on a user's behalf; endpoints that accept it list both BearerAuth and ApiKeyAuth.

Response

The user's accessible companies and default selection.

companies
object[]
required

Every company the user holds a real, assigned role on. Empty if the user is a member of no company.

defaultCompanyId
string<uuid> | null
required

The user's sticky active-company pointer, as a suggested default. null if unset. It is only a suggestion — honor it only when it appears in companies (the pointer can dangle at a company the user no longer belongs to).