API key or session

GET /v1/me

Read the signed-in account: role, watch count, users, masked keys, webhook URL, and the webhook signing secret.

Auth. Returns the account, role, watch count, users, masked keys, webhook URL, the signing secret, and the last webhook delivery. An expired trial can still read this.

curl -sS "$BASE/v1/me" -H "X-API-Key: $UW_KEY"

Keys are masked (uw_abc…wxyz). The full key is returned only by POST /v1/trial and POST /v1/keys. The webhook signing secret is returned in full, because the receiver has to verify it.