Identify the key

GET/api/v1/me

Any valid key

Returns the account this key belongs to, the scopes it was granted, and the effective scopes it can exercise (granted plus implied). Requires only a valid key — no scope — so it doubles as a key-verification probe.

Request

curl "https://your-crm.example.com/api/v1/me" \
  -H "Authorization: Bearer $RAABTA_API_KEY"

Response · 200 OK

{
  "data": {
    "account": {
      "id": "3f9a1c2e-5b7d-4e8f-9a0b-1c2d3e4f5a6b",
      "name": "Acme Clinic"
    },
    "key": {
      "id": "7c1e2d3f-4a5b-4c6d-8e9f-0a1b2c3d4e5f",
      "name": "Zapier automation",
      "scopes": [
        "contacts:write",
        "messages:send"
      ],
      "effective_scopes": [
        "contacts:read",
        "contacts:write",
        "messages:send",
        "templates:read"
      ],
      "expires_at": "2026-12-01T00:00:00.000Z",
      "rate_limit_per_minute": 60
    }
  }
}

Response

Wrapped in { data: … }

Name	Type	Description
`account`required	`object`	The account this key acts on
`account.id`required	`string (uuid)`	The account this key is bound to
`account.name`required	`string \| null`	Account display name
`key`required	`object`	The key that made this request
`key.id`required	`string (uuid)`	The key row id (not the secret)
`key.name`required	`string`	The name given when the key was created
`key.scopes`required	`string (enum)[]`	Scopes granted at creation
`key.effective_scopes`required	`string (enum)[]`	Granted scopes plus everything they imply — what the key can actually do
`key.expires_at`required	`string (date-time) \| null`	When the key stops working; null = never
`key.rate_limit_per_minute`required	`integer`	The per-minute budget this key is subject to

Errors

Status	Code	When
401	`unauthorized`	No usable API key: the Authorization header is missing or malformed, or the key is unknown, revoked or expired. The three are deliberately indistinguishable.
403	`account_suspended`	The account this key belongs to is suspended. Rotating the key will not help; contact support.
429	`rate_limited`	The per-key budget, or the per-IP budget for failed authentication, is exhausted. Honour `Retry-After` before retrying.
500	`internal`	Something failed on our side. Safe to retry with the same Idempotency-Key; quote `request_id` if it persists.