curl --request GET \
--url https://{host}/v1/me \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://{host}/v1/me', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://{host}/v1/me",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}import requests
url = "https://{host}/v1/me"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"data": {
"type": "users",
"id": "15",
"attributes": {
"name": "Jeffrey",
"lastName": "Ponsen",
"email": "jeffrey@example.com",
"phone": "+31612345678",
"locale": "nl",
"emailVerified": true,
"mfaEnabled": false,
"identities": [
"apple"
],
"createdAt": "2024-03-11T09:12:44.000000Z"
}
}
}Show current user
Scope: none — a working token is enough.
The first call to make: it answers whether your token works and what it is connected to.
include=sellers returns the businesses you belong to — for a partner, the
ones that granted your application, which saves you being told their ids out of
band. It is the list a seller switcher is drawn from, so it is membership rather
than reach: our own staff act for every business on the platform in the
administration, and being offered all of them to switch into is not useful in an
app. What a token may reach is decided per request by the scopes and the grant,
not by this list.
A business’s own API key (a client_credentials token) has nobody behind it:
this answers with the key itself — the client id as id, the key’s name as name,
every personal field null — and its sellers is the one business that made it.
Withdrawing the key answers 401 from then on.
curl --request GET \
--url https://{host}/v1/me \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://{host}/v1/me', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://{host}/v1/me",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}import requests
url = "https://{host}/v1/me"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"data": {
"type": "users",
"id": "15",
"attributes": {
"name": "Jeffrey",
"lastName": "Ponsen",
"email": "jeffrey@example.com",
"phone": "+31612345678",
"locale": "nl",
"emailVerified": true,
"mfaEnabled": false,
"identities": [
"apple"
],
"createdAt": "2024-03-11T09:12:44.000000Z"
}
}
}Authorizations
Query Parameters
sellers— the shops you belong to, as whole resources: name, logo and the rest, which is what a shop switcher draws from. For a partner's token, only the ones it was granted.addresses— your address book.favorites, andfavorites.watchfor the listings behind them.savedSearches— the searches you are notified about.
Everything but sellers is the account itself and needs the account:read scope;
asked for without it, the answer is a 403 with the code missing_scope.
sellers, addresses, favorites, favorites.watch, savedSearches