Skip to content

The identity's reachable orgs + projects (landing scope)

GET
/v1/admin/me

Returns the authenticated Clerk identity plus the orgs/projects it can reach (derived from membership). The console uses this to render the org/project switchers and to revalidate cookie landing hints. IDENTITY-ONLY; no {org_id} in the URL.

Ok

The authenticated console identity’s reachable orgs + projects (GET /v1/admin/me). IDENTITY-ONLY: the reachable set is derived from the user’s membership rows, never from a preselected/cookie customer. The *_hint fields are landing hints only; the console revalidates them against reachable_orgs/projects_by_org before using them.

object
identity
required
object
clerk_user_id
string
email
string
active_org_hint

Landing hint (the user’s default org).

string
active_project_hint

Landing hint (the user’s default project).

string
last_project_by_org
required

Per-org remembered/default project (orgId -> projectId).

object
key
additional properties
string
reachable_orgs
required
Array<object>

One org the identity can reach, with the effective role + source.

object
id
required

Canonical org UUID.

string
customer_id
required

Compatibility customer id linked to the org.

string
display_name
required
string
parent_org_id

Null for a root org.

string
nullable
root_org_id
required
string
role
required
string
Allowed values: owner admin member viewer billing
source
required

How the identity reaches this org.

string
Allowed values: direct inherited msp_grant
depth
required

Distance from the root org (0 = root).

integer
breadcrumb
required
Array<string>
plan_tier
required
string
limits
required
object
max_child_orgs
integer
max_projects
integer
projects_by_org
required

The active projects for each reachable org, keyed by org id.

object
key
additional properties
Array<object>

A project summary as rendered in the project switcher.

object
id
required

Canonical project UUID.

string
name
required
string
slug
required
string
is_default
required
boolean
pending_signup_claims
required

Live system-seeded owner claims matching the authenticated identity’s verified email. Claim ids are selectors, not bearer credentials; no invitation token or hash material is exposed.

Array<object>
object
id
required
string
org_id
required
string
role
required
string
Allowed values: owner
created_at
required
string format: date-time
expires_at
required
string format: date-time

Missing or invalid credential.

The canonical error envelope. error is a stable machine code.

object
error
required

Stable error code (e.g. unauthorized, forbidden, not_found, invalid, quota_exceeded, rate_limited).

string
Example
forbidden
message

Human-readable detail (never leaks internals).

string
Example
missing required scope