Introspection

Get the current connection

GET /v1/me

Returns the user, organization, and token metadata behind the current connection. The simplest way to confirm a token is valid and see what it resolves to. The API sees exactly what this user can see, evaluated live on every request.

Request

curl https://api.mereon.ai/v1/me \
  -H "Authorization: Bearer $MEREON_TOKEN"

Response

{
  "user": {
    "id": "usr_8s2k...",
    "name": "Alex Doe",
    "email": "alex@acme.com"
  },
  "organization": {
    "id": "org_3a1p...",
    "name": "Acme Inc",
    "timeZone": "America/Chicago"
  },
  "token": {
    "name": "Claude on my laptop",
    "tokenPrefix": "mrn_8s2k",
    "scopes": ["read"],
    "expiresAt": "2026-09-15T00:00:00.000Z"
  },
  "features": ["public-api", "pii-redaction"],
  "permissions": ["video.create.organization", "guide.create.organization"]
}

Fields

Field	Type	Notes
user.id	string	The connected user’s id.
user.name	string	Display name.
user.email	string | null	Email, when available.
organization.id	string	The organization the token is pinned to.
organization.name	string	Organization display name.
organization.timeZone	string | null	The organization’s time zone as an IANA name, or null when it has not set one. Read it to interpret a date the organization means as local, such as a due date.
token.name	string	The name you gave the token at creation.
token.tokenPrefix	string	The first characters of the token, for identification.
token.scopes	string[]	What this credential may do: read, content:write for uploading, announcement:write for drafting, sending and withdrawing announcements, narration:synthesize for voice narration, training:assign for assigning training and sending pop quizzes, lesson:write for creating and changing lessons, content:manage for editing, publishing, sharing and tagging what is already in the library, including a video or audio transcript, content:delete for deleting videos, audio, documents and guides from the library, issue:write for filing issues about the knowledge base, public-link:write for sharing a resource with someone who has no account, content-review:write for approving, rejecting, or asking for changes on a content submission, and issue:manage for dismissing, reopening, assigning, merging and resolving them, and member:manage for inviting people, changing their organization role, deactivating, reactivating and removing them, and setting who they report to, and team:manage for creating, renaming and deleting teams and changing who is on them, and company-role:manage for creating a company role, saving and publishing a draft of its name or description, moving, merging and deleting it, and choosing who holds it and their standing, and duty:manage for assigning, changing, and removing who is Responsible, Accountable, Consulted, or Informed, including how far a company role’s duty reaches on its advancement path, and curriculum:manage for adding or removing a lesson or a topic on a company role’s training curriculum, including when it is due and whether people who already hold the role must take it, and content-grant:manage for granting or removing a video, an audio file, a document, or a guide that an external company role can read, and topic:retire for retiring a topic the organization no longer follows and bringing it back, and item:retire for retiring one item the organization no longer follows and bringing it back, and plan:propose for proposing a plan of changes that you approve in Mereon before anything runs, and client:create for creating a solutions partner’s client organizations. A personal access token is issued read only; an OAuth token holds whatever was consented to.
token.expiresAt	string | null	ISO 8601 expiry, or null if non-expiring.
permissions	string[]	What the connected user may do, as resource.action[.scope] strings, resolved live on every request. Check this before offering a write: a credential holding content:write still cannot do anything its user is not permitted to do.
features	string[]	Product features this organization is entitled to. Distinct from token.scopes: scopes are what the credential may attempt, features are what the organization bought. Read this to decide what to offer rather than hardcoding an assumption. The set grows over time, so treat an unrecognised entry as something to ignore rather than an error.