Cowdidocs
API ReferenceProfile

Get the caller's profile settings

GET
/v1/user/settings/profile

Returns the caller's global profile: the name, locale, and timezone shared across every organization the caller belongs to. A user token calls this on behalf of the signed-in user. Returns 404 when the caller has no profile yet.

Authorization

oauth2
AuthorizationBearer <token>

Create a client with POST /v1/oauth/clients, then exchange its credentials for an access token. AUTHORIZATION_CODE clients act on behalf of a signed-in user and always use PKCE; CLIENT_CREDENTIALS clients act as themselves. A client may only be granted scopes its creator already holds — read the grantable list from GET /v1/oauth/clients/scopes.

In: header

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/v1/user/settings/profile"
{  "id": "550e8400-e29b-41d4-a716-446655440000",  "first_name": "John",  "last_name": "Doe",  "locale": "en-GB",  "timezone": "Africa/Nairobi",  "created_at": "2026-09-01T10:15:30Z",  "updated_at": "2026-10-15T14:22:00Z"}
{  "code": "BAD_REQUEST",  "description": "Bad Request"}
{  "code": "UNAUTHORISED",  "description": "Unauthorised"}
{  "code": "FORBIDDEN",  "description": "Forbidden"}
{  "id": "550e8400-e29b-41d4-a716-446655440000",  "first_name": "John",  "last_name": "Doe",  "locale": "en-GB",  "timezone": "Africa/Nairobi",  "created_at": "2026-09-01T10:15:30Z",  "updated_at": "2026-10-15T14:22:00Z"}
{  "code": "RATE_LIMIT_EXCEEDED",  "description": "Too Many Requests"}
{  "code": "INTERNAL_ERROR",  "description": "Internal Server Error"}

Get the caller's configuration GET

Returns the caller's configuration settings. Today this is only the PIN-reset requirement an administrator can set on the caller's account. A user token calls this on behalf of the signed-in user.

Update the caller's profile settings PATCH

Updates the caller's global profile: the name, locale, and timezone shared across every organization the caller belongs to. Send only the fields to change; omitted fields keep their current value. Changing the first name, last name, or locale queues a sync to the identity provider. A user token calls this on behalf of the signed-in user. Returns 404 when the caller has no profile yet.