Get current user
Get the current authenticated user’s profile information including:
- Email and role
- Feature flags (neo_ai access, etc.)
- User tag (if any)
- Team membership (if user belongs to a team)
Authorizations
JWT authentication token
Response
User profile information. A signed-in account that belongs to the other data region does not get a profile: the request fails with 403 and code region_mismatch (see the 403 response).
User's email address
Feature flags for the user. Values may be booleans (neo_ai), numbers (neo_credits), or objects. The protected_domains flag controls the government-domain guardrail per user and accepts: true to reset to the default (the policy is default-on for free-plan users), {"enabled": false} or false to disable it, or {"tlds": [".gov", ...]} to replace the default suffix list. An explicit flag always wins over the plan default.
True when an admin has blocked this account's AI access: sign-in, billing and existing results still work, but starting or resuming a task, schedules and integrations answer 403 ai_access_blocked. The admin's reason is internal and not returned.
Effective model source for the current user.
neo, byok, ai_connections User's role in the system
user, admin Whether automatic target identity simulation is enabled for this user.
Models exposed by the user's AI connections. Returned when AI connections are selected.
List of canonical Neo model IDs available for the user. In BYOK mode this contains only discovered provider models that Neo supports.
Provider-discovered BYOK models with Neo support classification. Returned when the user is in BYOK mode.
Caller's own effective spending-cap status (source/limit/used/remaining). Null for solo / no-team users or when the team isn't on a spend-controls plan. Drives the user's own cap banner.
Outbound IP information for customer allowlists
Effective BYOK neo cost rate for the user. Returned when the user is in BYOK mode.
Onboarding status flags for the user (active subscription, team membership)
Event the account's credits were attributed to, via a promo code or an admin grant. Null for users with no event attribution.
blackhat, defcon Effective UI cohort tag. Solo users receive their stored tag. Active team admins and members receive the highest-priority stored tag among accepted/auto-joined team admins; ordinary member tags are ignored while on the team. self_serve is a persistent cohort marker and can represent active, past_due, scheduled-cancel, or canceled customers; billing status and accounting_mode remain authoritative for access.
Team membership information (null if user is not in a team)
Resolved Triage run quota of the caller's team. Null when the team pays for Triage runs with Neo credits, when the caller has no team, or while Triage is off for the account.

