Cowdidocs
API ReferenceProfile

Set the caller's avatar

PUT
/v1/user/avatar

Sets the caller's avatar customisation, or clears it when options is null. The value is an opaque query string the client appends to its avatar style URL. A user token calls this on behalf of the signed-in user. Returns the caller's updated user record.

Authorization

oauth2
AuthorizationBearer <token>

Create a client with POST /v1/oauth/clients, then exchange its credentials for an access token. AUTHORIZATION_CODE clients act on behalf of a signed-in user and always use PKCE; CLIENT_CREDENTIALS clients act as themselves. A client may only be granted scopes its creator already holds — read the grantable list from GET /v1/oauth/clients/scopes.

In: header

Request Body

application/json

The caller's new avatar customisation. Send options as null to clear it.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

curl -X PUT "https://example.com/v1/user/avatar" \  -H "Content-Type: application/json" \  -d '{}'
{  "id": "b50e8400-e29b-41d4-a716-446655440000",  "resource_id": "usr_5n1t201rmv87aae5j4csam8000",  "first_name": "John",  "last_name": "Doe",  "status": "ACTIVE",  "email": "john.doe@example.com",  "email_verified": true,  "phone_number": "+254712345678",  "emails": [],  "phone_numbers": [],  "tag": "@johnd1234",  "locale": "en-KE",  "timezone": "Africa/Nairobi",  "last_login_at": "2026-02-03T10:15:30Z",  "avatar_options": "seed=k3f9x2&skinColor=edb98a"}
{  "code": "BAD_REQUEST",  "description": "Bad Request"}
{  "code": "UNAUTHORISED",  "description": "Unauthorised"}
{  "code": "FORBIDDEN",  "description": "Forbidden"}
{  "code": "RATE_LIMIT_EXCEEDED",  "description": "Too Many Requests"}
{  "code": "INTERNAL_ERROR",  "description": "Internal Server Error"}

Get the caller's user record GET

Returns the caller's user record. The response includes the caller's profile email and phone contacts, and suspension details when `status` is `SUSPENDED`. A user token calls this on behalf of the signed-in user.

Get the caller's configuration GET

Returns the caller's configuration settings. Today this is only the PIN-reset requirement an administrator can set on the caller's account. A user token calls this on behalf of the signed-in user.