Account
The current user and their Workspace memberships.
List the current user's Inbox for a Workspace
/api/v1/workspaces/{workspace_id}/inboxGenerated Discuss message notices are excluded from items and unread totals; read them in Discuss.
Path Parameters
Query Parameters
Header Parameters
stringUpcoming browser-session canonical read custody. The named private scope captures this response and a signed replay cursor in one snapshot. Successful responses include X-Assign-Realtime-Cursor and X-Assign-Realtime-Position. Apply all required retained state before acknowledging the corresponding socket checkpoint. Failed or incomplete baselines return no cursor.
inboxResponses
string·max 4096Signed scope/User/session-bound replay custody; only when the requested canonical baseline succeeds.
stringDecimal-string snapshot position; only with a successful baseline cursor.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Mark one Inbox item read or unread
/api/v1/inbox-items/{inbox_item_id}Generated Discuss message notices are not Inbox items and return the existing not-found response.
Browser callers must send the session-bound X-CSRF-Token; native
callers authenticate with a native access token and must not send a
browser cookie or CSRF value. Both credential types operate only on
the caller's own Inbox item.
Path Parameters
Header Parameters
Request Body
Responses
stringQuoted decimal optimistic-concurrency version.
string <uuid>Opaque Assign-owned UUIDv7 identifier. Clients must not derive meaning from it.
string <uuid>Opaque Assign-owned UUIDv7 identifier. Clients must not derive meaning from it.
string <uuid>Opaque Assign-owned UUIDv7 identifier. Clients must not derive meaning from it.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
List effective notification preferences
/api/v1/workspaces/{workspace_id}/notification-preferencesReturns every typed category, including inherited defaults, mandatory delivery rules, and whether the source Workspace currently has the paid email entitlement. A revision of 0 means the caller has not overridden that category.
Path Parameters
Header Parameters
stringUpcoming browser-session canonical read custody. The named private scope captures this response and a signed replay cursor in one snapshot. Successful responses include X-Assign-Realtime-Cursor and X-Assign-Realtime-Position. Apply all required retained state before acknowledging the corresponding socket checkpoint. Failed or incomplete baselines return no cursor.
inboxResponses
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Read private Project display preferences for one Workspace
/api/v1/workspaces/{workspace_id}/project-display-preferencesReturns the current Account user's Workspace-scoped Sort and custom sequence. An absent aggregate returns default, an empty sequence and revision 1. Inaccessible, archived and deleted Projects are pruned before returning the canonical revision. Browser-session consumer only; does not change shared Project ranks.
Path Parameters
Header Parameters
stringUpcoming browser-session canonical read custody. The named private scope captures this response and a signed replay cursor in one snapshot. Successful responses include X-Assign-Realtime-Cursor and X-Assign-Realtime-Position. Apply all required retained state before acknowledging the corresponding socket checkpoint. Failed or incomplete baselines return no cursor.
personal_projectsResponses
string·const no-storePrevents storage of error responses by clients and intermediaries.
stringQuoted decimal optimistic-concurrency version.
string·max 4096Signed scope/User/session-bound replay custody; only when the requested canonical baseline succeeds.
stringDecimal-string snapshot position; only with a successful baseline cursor.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Save private Project display preferences for one Workspace
/api/v1/workspaces/{workspace_id}/project-display-preferencesAtomically saves a private sort and up to 1000 unique readable same-Workspace Project UUIDs. Maximum JSON body is 64 KiB. Active membership and Project-read authority are required. If-Match prevents cross-device overwrites; retry the identical request with the same Idempotency-Key. Shared ranks and global profile revision are unchanged. Unavailable Projects return content-free validation errors.
Path Parameters
Header Parameters
string·min 43·max 43Session-bound CSRF token. It must exactly match the
__Host-assign_csrf cookie sent with the request.
Request Body
Responses
string·const no-storePrevents storage of error responses by clients and intermediaries.
stringQuoted decimal optimistic-concurrency version.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Read the current user's Project shortcuts for one Workspace
/api/v1/workspaces/{workspace_id}/project-shortcutsReturns exactly nine stable slots. Projects that are deleted, archived, or no longer readable are removed before the response is committed. The set is private to the current user and Workspace.
Path Parameters
Header Parameters
stringUpcoming browser-session canonical read custody. The named private scope captures this response and a signed replay cursor in one snapshot. Successful responses include X-Assign-Realtime-Cursor and X-Assign-Realtime-Position. Apply all required retained state before acknowledging the corresponding socket checkpoint. Failed or incomplete baselines return no cursor.
personal_projectsResponses
string·const no-storePrevents storage of error responses by clients and intermediaries.
stringQuoted decimal optimistic-concurrency version.
string·max 4096Signed scope/User/session-bound replay custody; only when the requested canonical baseline succeeds.
stringDecimal-string snapshot position; only with a successful baseline cursor.
booleanFalse until the user first replaces the server-created default set; clients may use this once to migrate a legacy device-local preference.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Replace the current user's Project shortcuts for one Workspace
/api/v1/workspaces/{workspace_id}/project-shortcutsReplaces all nine slots atomically. Every assigned Project must still be readable by the caller, Projects cannot be duplicated, and If-Match prevents one device from overwriting a newer set from another device.
Path Parameters
Header Parameters
Request Body
Responses
string·const no-storePrevents storage of error responses by clients and intermediaries.
stringQuoted decimal optimistic-concurrency version.
booleanFalse until the user first replaces the server-created default set; clients may use this once to migrate a legacy device-local preference.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Get browser push registration configuration
/api/v1/me/push-endpoints/browser/configReturns only the public VAPID application key. The route is unavailable when browser push is not configured.
Register or reconfirm this browser session's push subscription
/api/v1/me/push-endpoints/browserReplaces the current browser session's prior target. Subscription material is encrypted at rest and never returned.
Header Parameters
Request Body
Responses
string <uuid>Opaque Assign-owned UUIDv7 identifier. Clients must not derive meaning from it.
Update one typed notification preference
/api/v1/workspaces/{workspace_id}/notification-preferences/{category}Uses expected_revision: 0 to create the first override and the
returned positive revision for later compare-and-swap updates.
Mandatory categories cannot disable Inbox delivery. Their email channel
is also mandatory when email_available is true. A Workspace without
the paid email entitlement cannot enable email.
Path Parameters
Header Parameters
Request Body
Responses
booleanTrue only while the source Workspace has the locally materialized paid email entitlement.
booleanTrue while the caller has at least one active, recently confirmed endpoint.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Converge Inbox seen or read state through a cutoff
/api/v1/workspaces/{workspace_id}/inbox/read-stateApplies an idempotent, monotonic server cutoff so reordered updates from multiple devices cannot make newer items read or regress older state.
Path Parameters
Header Parameters
Request Body
Responses
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
List active native mobile credentials
/api/v1/me/mobile-credentialsReturns the caller's active mobile credentials across all Workspaces. Tokens, installation identifiers, and provider tokens are never returned.
Query Parameters
Responses
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Revoke every native mobile credential
/api/v1/me/mobile-credentialsRevokes every active native credential and associated push registration. Recent browser authentication is required.
Header Parameters
Responses
string·const no-storePrevents storage of error responses by clients and intermediaries.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Revoke one native mobile credential
/api/v1/me/mobile-credentials/{credential_id}Immediately revokes one of the caller's native credentials and its push registration. A foreign or absent credential returns 404.
Path Parameters
Header Parameters
Responses
string·const no-storePrevents storage of error responses by clients and intermediaries.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Create or renew the calling credential's push-device registration
/api/v1/me/mobile-credentials/current/push-deviceBinds one APNs or FCM delivery token to the calling native credential. The same token renews the registration; a replacement token atomically replaces the prior target. The provider token is accepted only for this request and is never returned.
Request Body
Responses
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Remove the calling credential's push-device registration
/api/v1/me/mobile-credentials/current/push-deviceIdempotently removes the calling native credential's push target before logout, account switch, or notification-permission removal.
Responses
string·const no-storePrevents storage of error responses by clients and intermediaries.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Read the current user and Workspace
/api/v1/meReturns the authenticated user and, when selected, the session's current Workspace, the caller's Actor within it, and their role. A newly registered account-only session omits the Workspace fields. Native bearer requests return the account-only projection and never inherit a browser session's selected Workspace. Upcoming interface_language_state uses bounded Accept-Language for this read, then the current credential hint when absent. Reading never persists a background-delivery hint.
Header Parameters
stringUpcoming browser-session canonical read custody. The named private scope captures this response and a signed replay cursor in one snapshot. Successful responses include X-Assign-Realtime-Cursor and X-Assign-Realtime-Position. Apply all required retained state before acknowledging the corresponding socket checkpoint. Failed or incomplete baselines return no cursor.
accountaccount_securityResponses
string·const no-storePrevents storage of error responses by clients and intermediaries.
stringQuoted decimal optimistic-concurrency version.
string·max 4096Signed scope/User/session-bound replay custody; only when the requested canonical baseline succeeds.
stringDecimal-string snapshot position; only with a successful baseline cursor.
objectUpcoming. Core-qualified presentation language. Desired Account preference wins; Automatic matches ordered device languages through finite aliases, then falls back to English. Unavailable stored preferences are retained and resolve safely to English.
string <uuid>Opaque Assign-owned UUIDv7 identifier. Clients must not derive meaning from it.
string·min 3·max 30Globally unique mutable public account handle. New handles use lowercase letters, numbers, and interior dots and are initially derived from the email local part. Existing hyphen/underscore handles remain readable. Previously claimed values remain reserved to the same User.
string·max 2048HTTPS legacy URL or authenticated stable API content path for an S3-hosted picture.
string·min 1·max 2Account-owned avatar letters override; null derives letters from the display name.
string·max 11Account-owned avatar background, a random family name at registration; null predates AVATAR-001.
booleanWhen true, timezone is the effective value from the current Workspace default.
string·min 1·max 35·default automaticDesired Account interface language, independent of regional locale and Workspace defaults. Older servers may omit this field; clients use automatic. Withdrawn languages may remain stored.
booleanWhen true, locale is the effective value from the current Workspace default.
booleanTrue only when the current account has a confirmed TOTP authenticator credential.
stringAccount-wide presentation preference for contextual or always-visible formatting controls across every editor host.
contextualpersistentbooleanWhen true, first_day_of_week is the effective value from the current Workspace default.
string <uuid>Opaque Assign-owned UUIDv7 identifier. Clients must not derive meaning from it.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Update the current user's profile
/api/v1/meUpdates one or more editable current-account profile and interface preference fields. Email remains read-only here: changing it is a separate verification flow that must prove control of the new mailbox.
The update is compare-and-swap. If-Match carries the user revision
last observed by the client, and a stale value is refused with 409
rather than silently overwriting a concurrent edit.
Header Parameters
Request Body
application/jsonstring·min 3·max 30Lowercased after trimming and unique across accounts. Only letters, numbers, and interior dots are accepted.
string·max 2Avatar letters override, 1–2 characters stored uppercased. An empty string clears the override and returns to name-derived letters.
string·max 11Shared user-chosen color: a Tailwind color family name, optionally pinned to one Tailwind step (for example amber or amber-400). A bare name lets each client choose the shade for its surface; a pinned step renders that exact shade.
string·max 16Optional E.164 profile-only phone number; empty removes it. It is not an authentication or notification destination.
stringWhich account name is preferred on compact identity surfaces. Username requires a selected username.
usernamefull_namebooleanSet true to use the current Workspace default; set false to keep a concrete Account value.
string·min 1·max 64Optional IANA timezone used for calendar-bound personal Work views. Invalid names are rejected; the server never guesses a timezone.
booleanSet true to use the current Workspace default; set false to keep a concrete Account value.
stringAccount interface language. Automatic follows qualified device preferences with English fallback. Only qualified public languages are writable; sample catalogs are not admitted. Values are trimmed and case-normalized.
automaticenbooleanSet true to use the current Workspace default; set false to keep a concrete Account value.
Responses
string·const no-storePrevents storage of error responses by clients and intermediaries.
stringQuoted decimal optimistic-concurrency version.
objectUpcoming. Core-qualified presentation language. Desired Account preference wins; Automatic matches ordered device languages through finite aliases, then falls back to English. Unavailable stored preferences are retained and resolve safely to English.
string <uuid>Opaque Assign-owned UUIDv7 identifier. Clients must not derive meaning from it.
string·min 3·max 30Globally unique mutable public account handle. New handles use lowercase letters, numbers, and interior dots and are initially derived from the email local part. Existing hyphen/underscore handles remain readable. Previously claimed values remain reserved to the same User.
string·max 2048HTTPS legacy URL or authenticated stable API content path for an S3-hosted picture.
string·min 1·max 2Account-owned avatar letters override; null derives letters from the display name.
string·max 11Account-owned avatar background, a random family name at registration; null predates AVATAR-001.
booleanWhen true, timezone is the effective value from the current Workspace default.
string·min 1·max 35·default automaticDesired Account interface language, independent of regional locale and Workspace defaults. Older servers may omit this field; clients use automatic. Withdrawn languages may remain stored.
booleanWhen true, locale is the effective value from the current Workspace default.
booleanTrue only when the current account has a confirmed TOTP authenticator credential.
stringAccount-wide presentation preference for contextual or always-visible formatting controls across every editor host.
contextualpersistentbooleanWhen true, first_day_of_week is the effective value from the current Workspace default.
string <uuid>Opaque Assign-owned UUIDv7 identifier. Clients must not derive meaning from it.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
integer·min 1Seconds until the client may retry.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Report current device language preferences
/api/v1/me/interface-language/sessionUpcoming. Report the ordered device languages on authenticated foreground entry or change. Core stores only the supported language hint for this browser session or native installation. This does not change the desired Account interface_language or regional/Voice settings. Use interface_language_state.hint_revision from GET /api/v1/me as If-Match, not the profile ETag. Repeating an unchanged effective hint does not advance its revision. A stale hint returns 409. Browser requests require CSRF. Native bearer requests use the authenticated installation.
Header Parameters
Request Body
Responses
stringQuoted decimal optimistic-concurrency version.
string·const no-storePrevents storage of error responses by clients and intermediaries.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Start a verified email-address change
/api/v1/me/email-changeRequires recent authentication. The current address remains authoritative until the session-bound, single-use token delivered to the new inbox is consumed.
Verify and apply an email-address change
/api/v1/me/email-change/verifyConsumes the token only in the session that requested it, changes the verified address, invalidates other identity tokens, and revokes every other session.
Redirect to a short-lived inline S3 URL for the current profile picture
/api/v1/me/profile-picture/contentList personal API tokens for the current Workspace
/api/v1/me/api-tokensReturns the current user's active, unrevoked personal API tokens for the Workspace selected by the browser session. Token secrets are never returned.
Query Parameters
Responses
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Create a personal API token for the current Workspace
/api/v1/me/api-tokensCreates an expiring, Workspace-bound token for non-interactive API and CLI use. The raw secret is returned exactly once in this response and must not be persisted by a browser or embedded in a URL. Recent authentication is required.
Header Parameters
Request Body
Responses
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Select the current user's current task
/api/v1/me/current-workThe task must be active, in progress, and assigned to the current user. If-Match prevents concurrent account-level selection changes from being overwritten.
List tasks eligible to become the current task
/api/v1/me/current-work/candidatesReturns up to 25 active in-progress tasks assigned to the current user across their Workspaces, excluding the selected task.
Path Parameters
Header Parameters
Responses
string·const no-storePrevents storage of error responses by clients and intermediaries.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
List the current user's sessions
/api/v1/me/sessionsReturns the caller's own live sessions across every Workspace, newest first. Revoked and expired sessions are omitted.
Sessions carry no IP address, user-agent, device name, or location. None is stored, and adding it would reverse the data-minimization decision in SECURITY-AUTH-001 that keeps network and client identity out of session records and session events. Sessions are distinguished by Workspace and last-seen time.
Query Parameters
Header Parameters
stringUpcoming browser-session canonical read custody. The named private scope captures this response and a signed replay cursor in one snapshot. Successful responses include X-Assign-Realtime-Cursor and X-Assign-Realtime-Position. Apply all required retained state before acknowledging the corresponding socket checkpoint. Failed or incomplete baselines return no cursor.
account_securityResponses
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·max 4096Signed scope/User/session-bound replay custody; only when the requested canonical baseline succeeds.
stringDecimal-string snapshot position; only with a successful baseline cursor.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Sign out every other session
/api/v1/me/sessionsRevokes every session belonging to the caller except the calling
one. Signing out the current session is POST /api/v1/auth/logout,
which owns cookie expiry.
Revocation is authoritative outside API process memory and is
enforced immediately across every instance. One session.revoked
event is recorded for each session whose state actually changes, in
that session's own Workspace; if any event cannot be recorded, every
revocation in the request rolls back. Repeating the call revokes
nothing further and reports zero.
Requires authentication within the last 15 minutes.
Header Parameters
Responses
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
integer·min 1Seconds until the client may retry.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
List connected MCP clients
/api/v1/me/mcp/grantsReturns the caller's active MCP OAuth grants, newest first, including the reviewed client identity, scopes, authorized Workspaces, last use, and absolute expiry. Raw access and refresh tokens are never returned.
Query Parameters
Responses
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
integer·min 1Seconds until the client may retry.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Disconnect an MCP client
/api/v1/me/mcp/grants/{grant_id}Immediately revokes one MCP OAuth grant belonging to the caller.
Access-token verification and refresh fail on every instance after the
database transaction commits. A foreign or absent grant returns 404.
Path Parameters
Header Parameters
Responses
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
integer·min 1Seconds until the client may retry.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Revoke one of the current user's sessions
/api/v1/me/sessions/{session_id}Revokes a single session belonging to the caller. Revoking the calling session is permitted, and the response then also expires the session and CSRF cookies.
Revoking an already-revoked session answers 204: the operation is
idempotent, because a client retrying a lost response must not be
told its device is still signed in. A session belonging to another
user answers 404, never 403, so the endpoint cannot confirm that
a session identifier exists.
Path Parameters
Header Parameters
Responses
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
integer·min 1Seconds until the client may retry.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
List linked external identities
/api/v1/me/identitiesReturns the caller's linked provider identities. The provider subject is never returned: it is a stable cross-service correlator with no client use.
Header Parameters
stringUpcoming browser-session canonical read custody. The named private scope captures this response and a signed replay cursor in one snapshot. Successful responses include X-Assign-Realtime-Cursor and X-Assign-Realtime-Position. Apply all required retained state before acknowledging the corresponding socket checkpoint. Failed or incomplete baselines return no cursor.
account_securityResponses
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·max 4096Signed scope/User/session-bound replay custody; only when the requested canonical baseline succeeds.
stringDecimal-string snapshot position; only with a successful baseline cursor.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Start linking an external identity
/api/v1/me/identitiesStarts a server-side link ceremony and returns the provider authorization URL to send the user to. It does not accept a provider token or identity assertion: the backend owns the account-linking decision, and a client-supplied assertion must never determine who owns an account.
The existing provider callback completes the ceremony. A ceremony is marked as a link and is claimed by a single conditional update, so a link ceremony can never be redeemed as a sign-in and a sign-in ceremony can never be redeemed as an explicit account-settings link.
The ceremony is bound to the already authenticated target account and
does not choose that target from the provider email. An identity
already belonging to another account is refused 409 and is never
transferred. Linking an identity already linked to the caller is
idempotent. Separately, ordinary provider sign-in may attach a
previously unseen identity when the provider verifies the same
normalized account email.
Requires authentication within the last 15 minutes.
Header Parameters
Request Body
Responses
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
integer·min 1Seconds until the client may retry.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
Unlink an external identity
/api/v1/me/identities/{identity_id}Removes a linked provider identity.
Refused with 409 last_sign_in_method when removing it would leave
the account with no usable way to sign in, counting a password
credential, each registered passkey, and each remaining identity. An
identity belonging to another user answers 404. Repeat deletion of
an already-unlinked identity answers 204.
Requires authentication within the last 15 minutes.
Path Parameters
Header Parameters
Responses
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
integer·min 1Seconds until the client may retry.
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
List current-user Workspaces
/api/v1/workspacesReturns one page of the caller's active Workspace memberships, ordered by Workspace name.
Query Parameters
Responses
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.
List Workspace members
/api/v1/workspaces/{workspace_id}/membersReturns one page of the Workspace's active memberships, for assignee
pickers and mention candidates. Callers with members:manage may set
include_suspended=true for the member-settings governance view;
suspended memberships remain excluded from ordinary pickers.
workspace_id must match the
caller's current session Workspace; any other value reports the same
not-found response as an absent Workspace.
Path Parameters
Query Parameters
Responses
integer·min 0Delay in seconds before retrying, when an expected maintenance end is known.
string·const no-storePrevents storage of error responses by clients and intermediaries.
string·min 1·max 200Correlation identifier for the request.
string·const nosniffPrevents user agents from MIME-sniffing the response.