> ## Documentation Index > Fetch the complete documentation index at: https://docs.gumnut.ai/llms.txt > Use this file to discover all available pages before exploring further. # Get the current user > Returns the profile of the authenticated user (the caller). Use this at the start of a session to ground subsequent calls (e.g., to confirm the caller's identity before making destructive changes). This tool does not accept a user ID; it always returns the authenticated caller. ## OpenAPI ````yaml https://api.gumnut.ai/openapi.json get /api/users/me openapi: 3.1.0 info: title: Gumnut API description: >- The Gumnut API manages photo and video libraries: upload and organize assets, search by content, group detected faces into people, and curate albums and stacks. Headless clients authenticate by sending either a Gumnut API key (`apikey_...`) or an OAuth access token as a Bearer token in the `Authorization` header. The Gumnut web and mobile apps sign in with a first-party session (Clerk session JWT) instead, which is also the only credential that can manage API keys. contact: name: Gumnut url: https://www.gumnut.ai/contact version: 1.0.0 servers: - url: https://api.gumnut.ai description: Production security: - apiKeyAuth: [] - oauthJwtAuth: [] tags: - name: assets description: >- Photos and videos in a library: upload, list and filter, update metadata, trash and restore. - name: search description: >- Content-based search over a library's assets, with the same filters as asset listing. - name: albums description: User-curated collections of assets. - name: album-assets description: Link records connecting albums to their member assets. - name: stacks description: >- Groups of related shots of the same moment, presented as a single unit with a cover asset. - name: people description: Named people, each built from clustered faces. - name: faces description: Detected faces and their assignment to people. - name: libraries description: Top-level containers that own assets, albums, people, and everything else. - name: events description: Change-event feed for keeping client state in sync. - name: tasks description: Status of background processing tasks. - name: users description: The authenticated user's profile. - name: api-keys description: >- Create and manage Gumnut API keys. Requires a first-party Gumnut app session — API keys and OAuth tokens cannot manage credentials. - name: oauth description: OAuth flow endpoints for obtaining and refreshing access tokens. - name: server description: Service health. paths: /api/users/me: get: tags: - users summary: Get the current user description: >- Returns the profile of the authenticated user (the caller). Use this at the start of a session to ground subsequent calls (e.g., to confirm the caller's identity before making destructive changes). This tool does not accept a user ID; it always returns the authenticated caller. operationId: get_current_user responses: '200': description: Successful Response content: application/json: schema: $ref: '#/components/schemas/UserResponse' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '403': description: >- The credentials are valid but not authorized for this operation — for example an API key whose action or library scope excludes it, or a credential type this operation does not accept. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '404': description: User not found content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '429': description: >- Rate limit exceeded. Retry after the interval in the `Retry-After` header. headers: Retry-After: description: Seconds to wait before retrying. schema: type: integer content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' components: schemas: UserResponse: properties: id: type: string title: Id description: Unique user identifier with 'intuser_' prefix email: anyOf: - type: string - type: 'null' title: Email description: User's email address first_name: anyOf: - type: string - type: 'null' title: First Name description: User's first name last_name: anyOf: - type: string - type: 'null' title: Last Name description: User's last name timezone: anyOf: - type: string - type: 'null' title: Timezone description: >- User's home timezone as an IANA zone id (e.g. 'America/Los_Angeles'); null until a home zone is captured is_active: type: boolean title: Is Active description: Whether this user account is currently active is_superuser: type: boolean title: Is Superuser description: Whether this user has superuser/admin privileges is_verified: type: boolean title: Is Verified description: Whether this user's email is verified storage_used_bytes: type: integer title: Storage Used Bytes description: Total bytes of assets the user is currently storing storage_limit_bytes: type: integer title: Storage Limit Bytes description: Maximum bytes of assets the user may store created_at: type: string format: date-time title: Created At description: When this user account was created updated_at: type: string format: date-time title: Updated At description: When this user account was last updated type: object required: - id - is_active - is_superuser - is_verified - storage_used_bytes - storage_limit_bytes - created_at - updated_at title: UserResponse description: Represents a user account with profile information. ErrorResponse: title: ErrorResponse type: object properties: detail: title: Detail type: string description: Human-readable explanation of the error. required: - detail securitySchemes: apiKeyAuth: type: http scheme: bearer description: >- Gumnut API key (`apikey_...`) sent as a Bearer token in the `Authorization` header. Create and manage keys in the Gumnut app, or with the API key endpoints while signed in to it. oauthJwtAuth: type: http scheme: bearer bearerFormat: JWT description: >- Short-lived JWT obtained from the OAuth token exchange, sent as a Bearer token in the `Authorization` header. ````