Management API
Session
Who the caller is and which organizations they belong to, with their role in each.
The dashboard calls this first to learn the signed-in user and their memberships. It needs a valid user token and nothing else.
Operations
| Operation | Request | Who may call it |
|---|---|---|
| getMe | GET /api/me | any signed-in user |
Management API requests carry a user token and are checked against the caller’s organization role. Delivery API requests carry an SDK key; the two never cross. Errors are always { error: { code, message } }.