Company context, capabilities, and usage
Inspect the current actor, effective Company capabilities, and bounded API usage without selecting authority in the request.
Inspect the current actor
GET /v1/me describes the represented organization, actor type (user, partner_application, or company_credential), and bounded effective public permissions derived from the authenticated request context. It accepts no organization, user, application, or partner selector.
- The response is informational and never grants authority to a later request.
- Names, email addresses, role assignments, license records, and internal authority evidence are excluded.
- A later operation is authenticated and authorized again even when /v1/me previously reported a related permission.
Read effective Company capabilities
GET /v1/company/capabilities returns stable public capability names derived from current Company authority and data restrictions. It does not expose the commercial records or restriction rows used to reach the decision.
- Capability names are catalog_items, hph_item_code, labor_hours.mcaa, labor_hours.phcc, and material_vendors.
- Do not send org_id or another Company selector; the represented Company comes from validated caller context.
- Capabilities describe what may be requested now, but they do not promise that a particular item or optional field exists.
- Capability possession cannot override operation permission, delegation, item access, quota, disclosure, or dependency availability.
Interpret usage and quotas
GET /v1/company/usage returns bounded business-usage and quota status for the represented Company. It is separate from HTTP request telemetry and does not expose protected item values, private accounting references, or raw customer activity.
- The default period is the most recent 30 days; an explicit inclusive UTC range may span no more than 90 days.
- Quotas are Company-wide across REST, MCP, approved Apps, and partner calls unless a public quota definition states a narrower limit.
- Cross-reference controls can separately limit requests, alternatives returned, and newly delivered unique alternatives.
- active_catalog_items may be displayed as measured capacity with its measured_at timestamp; it is a measurement, not the authoritative catalog record.
- A successful usage read does not reserve quota or authorize the operation whose usage it reports.