/organizationGet the caller's organizationReturns the organization associated with the bearer token. Singleton endpoint — there is no {organizationId} in the path and there is no way for a caller to read a different organization's record.
Today the organization model does not carry per-org plan or rate-limit overrides. The response stubs plan to "free" and populates rateLimits with the system-wide defaults (100 requests/min per org, 50 requests/min per endpoint). When per-org overrides land the same wire fields will start reflecting per-org values — the response shape is forwards-compatible.
Responses
Headers
X-RateLimit-LimitThe request cap for the tighter of the per-organization / per-endpoint windows that applied to this request.
X-RateLimit-RemainingRequests remaining in the current window.
X-RateLimit-ResetUnix timestamp (seconds) when the current window resets.
allOf · 2 options
datavaluerequiredThe response payload — shape depends on the endpoint.
metaobjectrequiredPagination metadata — populated on list endpoints, empty on single-resource endpoints.
Show child attributes
cursornull | stringOpaque cursor to pass to the next request.
hasMoreboolean | nullTrue when further pages of results are available.
dataobjectThe caller's organization. `plan` and `rateLimits` currently return stubbed defaults (`"free"` and the system-wide caps); see the description on `GET /organization` for the gap.
Show child attributes
createdAtstring · date-timerequireddefaultCurrencystringrequiredThree-letter ISO-4217 currency used for revenue displays.
defaultTimezonestringrequiredIANA timezone used for report aggregation.
idstring · uuidrequirednamestringrequiredplanstringrequiredBilling plan. Read-only on the public API.
rateLimitsobjectrequiredRate-limit caps applying to the organization. Currently reflects the system defaults; per-organization overrides are a tracked follow-up.
Show child attributes
endpointPerMinuteintegerrequiredRequests per minute for any single endpoint.
organizationPerMinuteintegerrequiredRequests per minute across the entire organization.
slugnull | stringURL-friendly short identifier. Read-only on the public API.
updatedAtstring · date-timerequired{
"data": {
"createdAt": "2026-06-09T00:00:00Z",
"defaultCurrency": "EUR",
"defaultTimezone": "Europe/Amsterdam",
"id": "00000000-0000-0000-0000-000000000000",
"name": "Acme Inc.",
"plan": "free",
"rateLimits": {
"endpointPerMinute": 50,
"organizationPerMinute": 100
},
"slug": "acme",
"updatedAt": "2026-06-09T00:00:00Z"
},
"meta": {
"cursor": "string",
"hasMore": true
}
}errorobjectrequiredShow child attributes
codestringrequiredMachine-readable error category.
detailsobjectOptional per-code context (field names, retry windows, …).
messagestringrequiredHuman-readable description — intended for operator logs, not end-user display.
{
"error": {
"code": "unauthorized",
"message": "Authentication required"
}
}Headers
Retry-AfterSeconds the client should wait before retrying.
errorobjectrequiredShow child attributes
codestringrequiredMachine-readable error category.
detailsobjectOptional per-code context (field names, retry windows, …).
messagestringrequiredHuman-readable description — intended for operator logs, not end-user display.
{
"error": {
"code": "rate_limited",
"details": {
"retry_after_seconds": 30
},
"message": "Rate limit exceeded"
}
}