Skip to main content
GET
Verify credentials

Authorizations

Authorization
string
header
required

Your Reason API key from Settings > API. New keys use reason_; legacy ara_ keys remain accepted. Keys are capability-scoped: run, mcp:read, mcp:write, secrets:read, secrets:write, sessions:read, sessions:debug, knowledge:read, memory:read, memory:write, skills:read, skills:write, repos:read, repos:write, reviews:read, reviews:write, deployment:read, analytics:read, org:read, org:write, attachments:read, attachments:write, guardrails:read, guardrails:write, automations:read, automations:write, agent_auth:read. mcp:write manages MCP server configuration only; it does not authorize remote MCP-tool execution. sessions:debug is privileged: it expands diagnostic session events only for organization owners/admins.

Response

The authenticated principal.

principal_type
enum<string>

API keys resolve to service_user; MCP OAuth grants resolve to user.

Available options:
service_user,
user
service_user_id
string

Present when principal_type is service_user.

service_user_name
string | null

Present when principal_type is service_user.

org_id
string

Organization pinned to the current credential.

scopes
string[]

Capabilities granted to the current API key or OAuth token.

user_id
string

Present when principal_type is user.

user_name
string | null

Present when principal_type is user.

email
string | null

Present when principal_type is user.

organization_name
string | null

Display name of the organization pinned to this credential.

organization_slug
string | null

URL slug of the organization pinned to this credential.

mcp_connections
object[]

Active MCP OAuth client grants for the signed-in user and organization.