The REST API for a signed-in user: your app calls it on the tenant's host with the user's own access token, which reaches only that user's profile, browser sessions and connected apps. Not sure this is the right API? See Choosing an API.
Send the user's access token as Authorization: Bearer …. Each operation needs one of these scopes:
profile: Read and change the user's namesessions:read: List the browsers the user is signed in onsessions:write: Sign the user out of one of their browsersconnected-apps:read: List the apps connected to the user's accountconnected-apps:write: Revoke an app's access to the user's accountErrors share one JSON shape with a stable error code. Every code and its fix is listed in Errors.
Download the spec as JSON or YAML, or read this page as markdown. The reference below is rendered from the same spec, and the API is tested against it. Point your client generator, editor or agent at https://api.authalla.com/me/v1/openapi.json.
To try requests, import that URL into Postman (Import → Link), Bruno (Import Collection → OpenAPI V3 Spec) or Insomnia (Import → URL), then set the bearer token on the collection.