Who am I

GET /api/v1/me
GET /api/v1/{organisation}/me

Auth: any valid organisation API key.

Use this after someone pastes an API key in your integration. It confirms the key works, returns organisation details, and lists the sources that key can use (for example to fill a source picker).

GET /api/v1/me infers the organisation from the bearer token, so a CMS plugin does not need an organisation ID. The {organisation} form stays for older clients. Both return the same payload.

#Response

{
  "organisation": {
    "id": "0194f…",
    "slug": "acme",
    "name": "Acme Inc"
  },
  "token": {
    "name": "WordPress",
    "abilities": ["pages.read", "pages.write"],
    "source_scope": null,
    "last_used_at": "2026-07-01T12:00:00+00:00",
    "expires_at": null
  },
  "sources": [
    {
      "id": "0194a…",
      "slug": "docs",
      "name": "Product docs",
      "knowledge_base": {
        "id": "0194b…",
        "name": "Default"
      }
    }
  ]
}

• source_scope is null when the key can access every source. Otherwise it lists the allowed source ids.
• sources already reflects that limit.

#Example

curl -sS \
  -H "Authorization: Bearer $DATALUMO_TOKEN" \
  "https://datalumo.app/api/v1/me"