API reference

Account

The signed-in person: profile, password, two-factor, passkeys, sessions. Dashboard sessions only.

The signed-in user and the organisations they belong to

GET/v1/me

Dashboard session

The signed-in user and the organisations they belong to.

Responses

200Me
401Problem

Fields of Me

impersonated_bystring | null
The email of the operator looking at the platform as this user, when one is.
organizationsOrganization[]required
- created_atdate-timerequired
- iduuidrequired
- namestringrequired
- roleRolerequired
  The caller's role in this organisation.
- slugstringrequired
userUserrequired
- created_atdate-timerequired
- emailstringrequired
- email_verifiedbooleanrequired
- has_passwordbooleanrequired
- iduuidrequired
- is_adminbooleanrequired
  An operator of the platform itself.
- namestringrequired
- totp_enabledbooleanrequired

curl "https://api.infraflow.app/v1/me" \
  -b cookies.txt

Response · 200

{
  "impersonated_by": "string",
  "organizations": [
    {
      "created_at": "2026-01-15T09:30:00Z",
      "id": "0197b2a4-5c1e-7d3a-9f10-4b6c8e2a1d55",
      "name": "my-app",
      "role": "owner",
      "slug": "acme"
    }
  ],
  "user": {
    "created_at": "2026-01-15T09:30:00Z",
    "email": "ada@example.org",
    "email_verified": true,
    "has_password": true,
    "id": "0197b2a4-5c1e-7d3a-9f10-4b6c8e2a1d55",
    "is_admin": true,
    "name": "my-app",
    "totp_enabled": true
  }
}

Change the signed-in user's display name

PATCH/v1/me

Dashboard session

Change the signed-in user's display name.

Request body · application/json

namestringrequired

Responses

200User
422Problem

Fields of User

created_atdate-timerequired
emailstringrequired
email_verifiedbooleanrequired
has_password

The signed-in user's passkeys

GET/v1/me/passkeys

Dashboard session

The signed-in user's passkeys.

Responses

200PasskeyInfo[]

Fields of PasskeyInfo

created_atdate-timerequired
iduuidrequired
last_used_atdate-time | null
namestringrequired

curl "https://api.infraflow.app/v1/me/passkeys" \
  -b cookies.txt

Response · 200

[
  {
    "created_at": "2026-01-15T09:30:00Z",
    "id": "0197b2a4-5c1e-7d3a-9f10-4b6c8e2a1d55",
    "last_used_at": "2026-01-15T09:30:00Z",
    "name": "my-app"
  }
]

Begin adding a passkey to the signed-in account

POST/v1/me/passkeys/register

Dashboard session

Begin adding a passkey to the signed-in account.

Responses

200PasskeyChallenge
409Problem
passkey_limit

Fields of PasskeyChallenge

flow_iduuidrequired
Sent back when finishing, to match the answer to this request.
optionsobjectrequired
Pass options.publicKey to navigator.credentials.create() or .get(), after PublicKeyCredential.parse…OptionsFromJSON.

Finish adding a passkey

POST/v1/me/passkeys/register/finish

Dashboard session

Finish adding a passkey.

Request body · application/json

credentialobjectrequired
credential.toJSON() from navigator.credentials.create().
flow_iduuidrequired
namestringrequired
A label to recognise the passkey by, such as "MacBook".

Responses

201PasskeyInfo
400Problem
passkey_expired,

Remove a passkey

DELETE/v1/me/passkeys/{id}

Dashboard session

Remove a passkey. It can no longer be used to sign in.

Path parameters

iduuidpathrequired

Responses

204no body
404Problem

curl -X DELETE "https://api.infraflow.app/v1/me/passkeys/0197b2a4-5c1e-7d3a-9f10-4b6c8e2a1d55" \
  -b cookies.txt

Set or change the password

POST/v1/me/password

Dashboard session

Set or change the password. Signs out every other session.

Request body · application/json

current_passwordstring | null
Required when the account already has a password.
new_passwordstringrequired

Responses

204no body
401Problem
invalid_credentials
422Problem

curl -X POST "https://api.infraflow.app/v1/me/password" \
  -b cookies.txt \
  -H "Content-Type: application/json" \
  -d '{
  "current_password": "string",
  "new_password": "string"
}'

Sessions signed in to this account

GET/v1/me/sessions

Dashboard session

Sessions signed in to this account.

Responses

200Session[]

Fields of Session

created_atdate-timerequired
currentbooleanrequired
Whether this is the session making the request.
iduuidrequired
ipstring | null
last_seen_atdate-timerequired

Sign out one session

DELETE/v1/me/sessions/{id}

Dashboard session

Sign out one session.

Path parameters

iduuidpathrequired

Responses

204no body
404Problem

curl -X DELETE "https://api.infraflow.app/v1/me/sessions/0197b2a4-5c1e-7d3a-9f10-4b6c8e2a1d55" \
  -b cookies.txt

Turn off two-factor authentication

POST/v1/me/totp/disable

Dashboard session

Turn off two-factor authentication. Requires a current authenticator or recovery code.

Request body · application/json

codestringrequired

Responses

204no body
401Problem
invalid_code

curl -X POST "https://api.infraflow.app/v1/me/totp/disable" \
  -b cookies.txt \
  -H "Content-Type: application/json" \
  -d '{
  "code": "123456"
}'

Confirm the authenticator code and turn on two-factor authentication

POST/v1/me/totp/enable

Dashboard session

Confirm the authenticator code and turn on two-factor authentication.

Request body · application/json

codestringrequired

Responses

200RecoveryCodes
401Problem
invalid_code
409Problem

Fields of RecoveryCodes

recovery_codesstring[]required
Single-use codes for signing in without the authenticator. They are shown once and cannot be retrieved later.

Start enrolling an authenticator app

POST/v1/me/totp/setup

Dashboard session

Start enrolling an authenticator app. Nothing changes until the code is confirmed with /v1/me/totp/enable.

Responses

200TotpSetup
409Problem
totp_already_enabled

Fields of TotpSetup

otpauth_urlstringrequired
otpauth:// URL to render as a QR code.
secretstringrequired
Base32 secret for manual entry.

curl -X POST "https://api.infraflow.app/v1/me/totp/setup" \
  -b cookies.txt

{ "impersonated_by": "string", "organizations": [ { "created_at": "2026-01-15T09:30:00Z", "id": "0197b2a4-5c1e-7d3a-9f10-4b6c8e2a1d55", "name": "my-app", "role": "owner", "slug": "acme" } ], "user": { "created_at": "2026-01-15T09:30:00Z", "email": "ada@example.org", "email_verified": true, "has_password": true, "id": "0197b2a4-5c1e-7d3a-9f10-4b6c8e2a1d55", "is_admin": true, "name": "my-app", "totp_enabled": true } }