GET /v1/console/session

Call	GET /v1/console/session
Price	free
Scope	console session cookie (not an API key)
Operation id	getConsoleSession

What it does

Who is signed in, the organizations they belong to with their role in each, whether TOTP is still owed for this session, and when the session expires if left idle (7 days after last use). Using the session extends it. Session cookie required.

Example request

Copy it as curl. Set VERDICT_API_KEY first; uuidgen makes a fresh Idempotency-Key.

Request

curl -X GET 'https://api.askverdict.io/v1/console/session' \
  --cookie "verdict_session=$VERDICT_SESSION"

Example response

200: The session.

200 response

{
  "user": {
    "id": "usr_01JC3Z4Y8R9K2M5N7P1Q3S5T7V",
    "email": "[email protected]",
    "totp_enabled": false
  },
  "orgs": [
    {
      "id": "org_01JC3Z4Y8R9K2M5N7P1Q3S5T7V",
      "name": "Northwind Ops",
      "slug": "northwind-ops",
      "role": "owner",
      "created_at": "2026-11-01T09:00:00Z"
    }
  ],
  "mfa_verified": false,
  "idle_expires_at": "2026-11-14T14:00:00Z"
}

Parameters

Name	In	Type	Required	Description
x-verdict-version	header	string	no	API version to use, a date. Defaults to the version current when the key was created. The current version is 2026-11-01.

Response fields (200)

Schema ConsoleSession.

Field	Type	Required	Description
user	ConsoleUser	yes	A console user.
user.id	string	yes	User id.
user.email	string (email)	yes	The user’s verified email.
user.totp_enabled	boolean	yes	Whether TOTP is turned on.
orgs	array of ConsoleOrg	yes	Organizations the user belongs to.
orgs[].id	string	yes	Organization id.
orgs[].name	string	yes	Organization name.
orgs[].slug	string	yes	URL-safe organization slug.
orgs[].role	enum: “owner”, “admin”, “developer”, “billing”, “read_only”	yes	The user’s role in this organization.
orgs[].created_at	string (date-time)	yes	When the organization was created.
mfa_verified	boolean	yes	Whether this session has passed TOTP. When the user has TOTP on and this is false, org actions answer 401 until POST /v1/console/totp/verify succeeds.
idle_expires_at	string (date-time)	yes	When the session expires if it is not used again (7 days after last use).

Errors

Errors are RFC 9457 problem details and are never billed. Branch on type. See Errors.

Status	Meaning
400	Invalid request: malformed JSON, an unknown field, a failed constraint or a size limit (invalid_request).
401	Missing, malformed, revoked or expired API key, or a bad webhook signature (unauthorized).
429	Rate limited (rate_limited). Wait Retry-After seconds.
500	Unexpected server error (internal). Not billed; retry with the same Idempotency-Key.

Try it

Open the interactive reference to send this request from the browser. The full document is at /openapi.json.