Skip to content
DocktDocktDOCKT

Get current auth context

GET
/v1/auth/me
curl --request GET \
  --url https://api.dockt.com/v1/auth/me \
  --header 'Authorization: Bearer <token>' \
  --header 'x-dockt-expected-workspace: wsp_example'

Returns the authenticated principal, active account or workspace scope, available scopes, and granted permissions.

Authorizations

Section titled “Authorizations”

Parameters

Section titled “Parameters”

Header Parameters

Section titled “Header Parameters”
x-dockt-expected-user

Rejects the request with 401 unless the browser session belongs to this auth_user_id. This assertion does not grant authority.

string
>= 1 characters
x-dockt-expected-workspace

Unique Dockt workspace identifier.

Responses

Section titled “Responses”

200

Section titled “200”

Envelope for a single resource response.

Media typeapplication/json

Envelope for a single resource response.

object
object
required
string
Allowed values: single
data
required

Current authorization context for the request, including principal type, active scope, available scopes, and permissions.

object
object
required
string
Allowed values: auth_context
auth_type
required
string
Allowed values: session api_credential
api_credential_type
required
Any of:

Machine credential type used for the current request.

string
Allowed values: api_key m2m
principal_scope_type
required
Any of:

Whether the authenticated principal is acting at account level or within one workspace.

string
Allowed values: account workspace
permissions
required
Array<string>
Allowed values: account:read account:write workspaces:read workspaces:write api-credentials:read api-credentials:manage social-compliance-packages:read workspace:read workspace-configuration:read assessment-policy:write job-profiles:write monitoring-policy:write notifications:manage assessments:read assessments:write documents:read documents:create documents:delete decisions:read decisions:outcome
active_scope
required
Any of:

Account or workspace scope that a session can act within.

object
object
required
string
Allowed values: principal_scope
scope_type
required

Whether the authenticated principal is acting at account level or within one workspace.

string
Allowed values: account workspace
scope_id
required
Any of:

Unique Dockt account identifier.

string
account_id
required

Unique Dockt account identifier.

string
name
required

Human-readable name shown in Dockt and customer systems.

string
>= 1 characters <= 120 characters
role
required
Any of:

Role used to authorize account and workspace actions.

string
Allowed values: owner admin developer viewer
status
required

Membership state for a user within an account.

string
Allowed values: invited active disabled
workspace_status
Any of:

Lifecycle state for a workspace.

string
Allowed values: active archived suspended
available_scopes
required
Array<object>

Account or workspace scope that a session can act within.

object
object
required
string
Allowed values: principal_scope
scope_type
required

Whether the authenticated principal is acting at account level or within one workspace.

string
Allowed values: account workspace
scope_id
required
Any of:

Unique Dockt account identifier.

string
account_id
required

Unique Dockt account identifier.

string
name
required

Human-readable name shown in Dockt and customer systems.

string
>= 1 characters <= 120 characters
role
required
Any of:

Role used to authorize account and workspace actions.

string
Allowed values: owner admin developer viewer
status
required

Membership state for a user within an account.

string
Allowed values: invited active disabled
workspace_status
Any of:

Lifecycle state for a workspace.

string
Allowed values: active archived suspended
actor
required
Any of:

Signed-in user details for browser session requests.

object
object
required
string
Allowed values: session_actor
id
required
string
>= 1 characters
auth_user_id
required
string
>= 1 characters
email
required
string
>= 1 characters
first_name
required
string
>= 1 characters
last_name
required
string
>= 1 characters
role
required

Role used to authorize account and workspace actions.

string
Allowed values: owner admin developer viewer
scope_type
required

Whether the authenticated principal is acting at account level or within one workspace.

string
Allowed values: account workspace
scope_id
required
Any of:

Unique Dockt account identifier.

string
onboarding_required
required
boolean
updated_at
required

ISO 8601 date-time string.

string format: date-time
Example
{
  "object": "single",
  "data": {
    "object": "auth_context",
    "auth_type": "session",
    "api_credential_type": "api_key",
    "principal_scope_type": "account",
    "permissions": [
      "account:read"
    ],
    "active_scope": {
      "object": "principal_scope",
      "scope_type": "account",
      "scope_id": "acc_example",
      "account_id": "acc_example",
      "role": "owner",
      "status": "invited",
      "workspace_status": "active"
    },
    "available_scopes": [
      {
        "object": "principal_scope",
        "scope_type": "account",
        "scope_id": "acc_example",
        "account_id": "acc_example",
        "role": "owner",
        "status": "invited",
        "workspace_status": "active"
      }
    ],
    "actor": {
      "object": "session_actor",
      "role": "owner",
      "scope_type": "account",
      "scope_id": "acc_example"
    },
    "updated_at": "2026-08-06T09:30:00Z"
  }
}

400

Section titled “400”

Problem Details response for HTTP 400. The type URI is the stable machine-readable error code.

Media typeapplication/problem+json

Standard error response with a stable status, human-readable detail, and optional validation errors.

object
type
required
string
title
required
string
status
required
number
detail
required
string
instance
required
Any of:

Request identifier that Dockt support can use to trace an API call.

string
errors

Structured request validation issues.

object
issues
required
Array<object>

One request validation issue with a stable field path and human-readable message.

object
path
required
Array
message
required
string
Example
{
  "type": "https://docs.dockt.com/errors/invalid-request",
  "title": "Bad request",
  "status": 400,
  "detail": "The request did not match the expected schema.",
  "instance": "req_example1042"
}

401

Section titled “401”

Problem Details response for HTTP 401. The type URI is the stable machine-readable error code.

Media typeapplication/problem+json

Standard error response with a stable status, human-readable detail, and optional validation errors.

object
type
required
string
title
required
string
status
required
number
detail
required
string
instance
required
Any of:

Request identifier that Dockt support can use to trace an API call.

string
errors

Structured request validation issues.

object
issues
required
Array<object>

One request validation issue with a stable field path and human-readable message.

object
path
required
Array
message
required
string
Example
{
  "type": "https://docs.dockt.com/errors/missing-auth",
  "title": "Unauthorized",
  "status": 401,
  "detail": "Send a valid bearer token or browser session.",
  "instance": "req_example1042"
}

403

Section titled “403”

Problem Details response for HTTP 403. The type URI is the stable machine-readable error code.

Media typeapplication/problem+json

Standard error response with a stable status, human-readable detail, and optional validation errors.

object
type
required
string
title
required
string
status
required
number
detail
required
string
instance
required
Any of:

Request identifier that Dockt support can use to trace an API call.

string
errors

Structured request validation issues.

object
issues
required
Array<object>

One request validation issue with a stable field path and human-readable message.

object
path
required
Array
message
required
string
Example
{
  "type": "https://docs.dockt.com/errors/forbidden",
  "title": "Forbidden",
  "status": 403,
  "detail": "The authenticated principal does not have the required permission.",
  "instance": "req_example1042"
}

404

Section titled “404”

Problem Details response for HTTP 404. The type URI is the stable machine-readable error code.

Media typeapplication/problem+json

Standard error response with a stable status, human-readable detail, and optional validation errors.

object
type
required
string
title
required
string
status
required
number
detail
required
string
instance
required
Any of:

Request identifier that Dockt support can use to trace an API call.

string
errors

Structured request validation issues.

object
issues
required
Array<object>

One request validation issue with a stable field path and human-readable message.

object
path
required
Array
message
required
string
Example
{
  "type": "https://docs.dockt.com/errors/not-found",
  "title": "Not found",
  "status": 404,
  "detail": "The requested resource was not found in the authenticated scope.",
  "instance": "req_example1042"
}

409

Section titled “409”

Problem Details response for HTTP 409. The type URI is the stable machine-readable error code.

Media typeapplication/problem+json

Standard error response with a stable status, human-readable detail, and optional validation errors.

object
type
required
string
title
required
string
status
required
number
detail
required
string
instance
required
Any of:

Request identifier that Dockt support can use to trace an API call.

string
errors

Structured request validation issues.

object
issues
required
Array<object>

One request validation issue with a stable field path and human-readable message.

object
path
required
Array
message
required
string
Example
{
  "type": "https://docs.dockt.com/errors/conflict",
  "title": "Conflict",
  "status": 409,
  "detail": "The request conflicts with the current resource state.",
  "instance": "req_example1042"
}

422

Section titled “422”

Problem Details response for HTTP 422. The type URI is the stable machine-readable error code.

Media typeapplication/problem+json

Standard error response with a stable status, human-readable detail, and optional validation errors.

object
type
required
string
title
required
string
status
required
number
detail
required
string
instance
required
Any of:

Request identifier that Dockt support can use to trace an API call.

string
errors

Structured request validation issues.

object
issues
required
Array<object>

One request validation issue with a stable field path and human-readable message.

object
path
required
Array
message
required
string
Example
{
  "type": "https://docs.dockt.com/errors/validation",
  "title": "Validation failed",
  "status": 422,
  "detail": "Correct the invalid fields and send the request again.",
  "instance": "req_example1042",
  "errors": {
    "issues": [
      {
        "path": [
          "body",
          "inputs",
          "3",
          "value"
        ],
        "message": "Expected a two-letter country code."
      }
    ]
  }
}

429

Section titled “429”

Problem Details response for HTTP 429. The type URI is the stable machine-readable error code.

Media typeapplication/problem+json

Standard error response with a stable status, human-readable detail, and optional validation errors.

object
type
required
string
title
required
string
status
required
number
detail
required
string
instance
required
Any of:

Request identifier that Dockt support can use to trace an API call.

string
errors

Structured request validation issues.

object
issues
required
Array<object>

One request validation issue with a stable field path and human-readable message.

object
path
required
Array
message
required
string
Example
{
  "type": "https://docs.dockt.com/errors/rate-limit",
  "title": "Too many requests",
  "status": 429,
  "detail": "Wait for the Retry-After interval before retrying.",
  "instance": "req_example1042"
}

500

Section titled “500”

Problem Details response for HTTP 500. The type URI is the stable machine-readable error code.

Media typeapplication/problem+json

Standard error response with a stable status, human-readable detail, and optional validation errors.

object
type
required
string
title
required
string
status
required
number
detail
required
string
instance
required
Any of:

Request identifier that Dockt support can use to trace an API call.

string
errors

Structured request validation issues.

object
issues
required
Array<object>

One request validation issue with a stable field path and human-readable message.

object
path
required
Array
message
required
string
Example
{
  "type": "https://docs.dockt.com/errors/internal",
  "title": "Internal server error",
  "status": 500,
  "detail": "Retry the request safely or contact Dockt support with the request ID.",
  "instance": "req_example1042"
}

503

Section titled “503”

Problem Details response for HTTP 503. The type URI is the stable machine-readable error code.

Media typeapplication/problem+json

Standard error response with a stable status, human-readable detail, and optional validation errors.

object
type
required
string
title
required
string
status
required
number
detail
required
string
instance
required
Any of:

Request identifier that Dockt support can use to trace an API call.

string
errors

Structured request validation issues.

object
issues
required
Array<object>

One request validation issue with a stable field path and human-readable message.

object
path
required
Array
message
required
string
Example
{
  "instance": "req_example1042"
}