> ## Documentation Index
> Fetch the complete documentation index at: https://help.abacusdocs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get current user

> Current user profile and organization snapshot.

Returns the signed-in user plus organization and billing snapshot. The SPA uses this as bootstrap — including which features the client should show.

<Note>
  An organization API key authenticates, then this route **403s**. It answers about the human, not the key's tenant. Call it with an Auth0 token or a session.
</Note>


## OpenAPI

````yaml GET /api/v2/me/
openapi: 3.1.0
info:
  title: Abacus Docs API
  version: 1.0.0
  description: |
    REST + SSE surface for Abacus Docs on the same host as the web app
    (`https://abacusdocs.com`). Paths are `/api/v2/…`.

    Authenticate with an organisation API key (`sk-abacus-*`) as a Bearer
    token, or an Auth0 access token. Cross-tenant reads return **404**, not
    403. Page-based lists use `?page=` and `?page_size=`.

    Extraction, reprocess, schema tests, and chat turns spend credits.
    See the help centre Credits pages for rates.
  contact:
    name: Abacus Docs
    url: https://abacusdocs.com/contact
servers:
  - url: https://abacusdocs.com
    description: Production (Extract)
security: []
paths:
  /api/v2/me/:
    get:
      tags:
        - v2/users
      summary: Get current user
      description: >-
        Returns the authenticated user's profile including organization and
        preferred locale.
      operationId: v2_me_retrieve
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/User'
          description: ''
      security:
        - extractApiKey: []
        - bearerAuth: []
        - cookieAuth: []
components:
  schemas:
    User:
      type: object
      description: >-
        Serializes the authenticated user's profile for the v2 API (consumed by
        abacus-spa).


        `role` is the user's role in `organization` — `owner`, `admin` or
        `member`,

        or null when the user has no membership. Clients may gate navigation on
        it;

        the server remains the authority.
      properties:
        id:
          type: integer
          readOnly: true
        email:
          type: string
          format: email
          title: Email address
          maxLength: 254
        first_name:
          type: string
          maxLength: 150
        last_name:
          type: string
          maxLength: 150
        date_joined:
          type: string
          format: date-time
          readOnly: true
        organization_id:
          type:
            - integer
            - 'null'
          readOnly: true
        organization_name:
          type:
            - string
            - 'null'
          readOnly: true
        role:
          type:
            - string
            - 'null'
          readOnly: true
        locale:
          readOnly: true
          description: >-
            User's preferred UI language. Populated from Auth0 locale claim on
            first login.


            * `en` - English

            * `ar` - Arabic

            * `fr` - French

            * `ur` - Urdu

            * `hi` - Hindi

            * `es` - Spanish

            * `pt` - Portuguese
          oneOf:
            - $ref: '#/components/schemas/LocaleEnum'
            - $ref: '#/components/schemas/NullEnum'
      required:
        - date_joined
        - id
        - locale
        - organization_id
        - organization_name
        - role
    LocaleEnum:
      enum:
        - en
        - ar
        - fr
        - ur
        - hi
        - es
        - pt
      type: string
      description: |-
        * `en` - English
        * `ar` - Arabic
        * `fr` - French
        * `ur` - Urdu
        * `hi` - Hindi
        * `es` - Spanish
        * `pt` - Portuguese
    NullEnum:
      type: 'null'
  securitySchemes:
    extractApiKey:
      type: http
      scheme: bearer
      bearerFormat: API Key
      description: |
        Organisation API key from Settings → API / `/api/keys/`. The secret is
        shown once. Send `Authorization: Bearer sk-abacus-…`. One active key
        per organisation. Ingest (`/api/v2/ingest/*`) refuses API keys — that
        surface is Auth0-only with `ingest:read` / `ingest:write` scopes.
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: >
        Auth0 access token for a signed-in user. Send `Authorization: Bearer
        <token>`.

        The SPA and desktop agent use this. Prefer an organisation API key for

        server-to-server integrations.
    cookieAuth:
      type: apiKey
      in: cookie
      name: sessionid
      description: |
        Django session cookie from a browser login. Present so the web app can
        call `/api/v2` without a header. Do not rely on this for integrations.

````