Skip to main content
GET
Read the calling user's partner row

Authorizations

Authorization
string
header
required

User-issued personal access token (format: flx_pat_).

Response

200 - application/json

Self-serializer for /me/partner.

Returns only what's safe to surface to the partner owner. The signing secret hash and API key hash are NEVER included — they're sha256 outputs but exposing them would let an attacker who exfiltrated a hash independently verify guesses against the auth backend without ever hitting the rate limiter, so we treat them as secrets too.

id
string<uuid>
required
read-only
slug
string
required
read-only
Pattern: ^[-a-zA-Z0-9_]+$
name
string
required
read-only
contact_email
string<email>
required
read-only
website_url
string<uri>
required
read-only
api_key_prefix
string
required
read-only
scopes
string[]
required
read-only
Maximum string length: 64
game_scopes
string[]
required
read-only
Maximum string length: 32
Pattern: ^[-a-zA-Z0-9_]+$
allowed_origins
string<uri>[]
required
read-only
Maximum string length: 200
rate_limit_tier
enum<string>
required
  • standard - Standard (1000/min)
  • premium - Premium (20000/min)
Available options:
standard,
premium
status
enum<string>
required
  • active - Active
  • suspended - Suspended
  • revoked - Revoked
Available options:
active,
suspended,
revoked
secret_rotated_at
string<date-time> | null
required
read-only
last_used_at
string<date-time> | null
required
read-only
created_at
string<date-time>
required
read-only
updated_at
string<date-time>
required
read-only