The identity's reachable orgs + projects (landing scope)

GET

/v1/admin/me

• Production
• Local

Returns the authenticated Clerk identity plus the orgs/projects it can reach (derived from membership). The console uses this to render the org/project switchers and to revalidate cookie landing hints. IDENTITY-ONLY; no {org_id} in the URL.

Authorizations

• ClerkSession
• AgentKey
  account:admin

Responses

200

Ok

The authenticated console identity’s reachable orgs + projects (GET /v1/admin/me). IDENTITY-ONLY: the reachable set is derived from the user’s membership rows, never from a preselected/cookie customer. The *_hint fields are landing hints only; the console revalidates them against reachable_orgs/projects_by_org before using them.

object

identity

required

object

clerk_user_id

string

email

string

active_org_hint

Landing hint (the user’s default org).

string

active_project_hint

Landing hint (the user’s default project).

string

last_project_by_org

required

Per-org remembered/default project (orgId -> projectId).

object

key

additional properties

string

reachable_orgs

required

Array<object>

One org the identity can reach, with the effective role + source.

object

id

required

Canonical org UUID.

string

customer_id

required

Compatibility customer id linked to the org.

string

display_name

required

string

parent_org_id

Null for a root org.

string

nullable

root_org_id

required

string

role

required

string

Allowed values: owner admin member viewer billing

source

required

How the identity reaches this org.

string

Allowed values: direct inherited msp_grant

depth

required

Distance from the root org (0 = root).

integer

breadcrumb

required

Array<string>

plan_tier

required

string

limits

required

object

max_child_orgs

integer

max_projects

integer

projects_by_org

required

The active projects for each reachable org, keyed by org id.

object

key

additional properties

Array<object>

A project summary as rendered in the project switcher.

object

id

required

Canonical project UUID.

string

name

required

string

slug

required

string

is_default

required

boolean

pending_team_invitation_count

Pending native invitations for the verified email.

integer

pending_signup_claims

required

Live system-seeded owner claims matching the authenticated identity’s verified email. Claim ids are selectors, not bearer credentials; no invitation token or hash material is exposed.

Array<object>

object

gift

object

gift_code

string

<= 64 characters

redeem_before

string format: date-time

status

required

Pending_human_claim is not Startup activation. No card is required to claim a gift.

string

campaign_id

string

claim_id

string

ends_at

string format: date-time

id

required

string

org_id

required

string

role

required

string

Allowed values: owner

created_at

required

string format: date-time

expires_at

required

string format: date-time

401

Missing or invalid credential.

The canonical error envelope. error is a stable machine code.

object

error

required

Stable error code (e.g. unauthorized, forbidden, not_found, invalid, quota_exceeded, rate_limited).

string

Example

forbidden

message

Human-readable detail (never leaks internals).

string

Example

missing required scope

reason

Machine-readable quota reason. inbox_limit_exceeded means billing account inbox capacity across all organizations and projects sharing that account; enrollment_token_mailbox_budget_exhausted means the enrollment key lifetime creation allowance. Read message for recovery; inbox counts are separate from sending quotas.

string

used

Consumed plus reserved units.

integer format: int64

delta

Requested additional units.

integer format: int64

limit

integer format: int64

remaining

integer format: int64

consumed

integer format: int64

reserved

integer format: int64

next_reset_at

Next UTC usage-period boundary; pending reservations survive this boundary.

string format: date-time

upgrade_required

boolean