Check a key

GET/v1/me

Says which organisation a key belongs to, what it is called, its rate limit, and every site it reaches with what it may do at each. Call it first, to check a key works and to learn the site ids every other call takes.

Headers

• Authorizationrequired

  An API key from Automation > Access in the Dnero portal, sent as Authorization: Bearer <key>.

  string

Responses

• 200OK
• 401Unauthorizedmissing_keyinvalid_keykey_expired+1 more
• 403Forbiddenkey_revokedassistant_keykey_without_access+7 more
• 429Too Many Requestsrate_limited
• 500Internal Server Errorserver_error
• 502Bad Gatewayupstream_unavailable

200 OK

• keyrequired

  The key this request was made with.

  object

  4 fields

  • idrequired

    The key's id. Quote it when asking Dnero about this key.

    string

  • namerequired

    The name the key was given in the Dnero portal.

    string

  • rateLimitrequired

    Requests this key may make per minute.

    integer

  • expiresAt

    When the key stops working. Absent for a key that does not expire.

    string · date-time

• organisationrequired

  The organisation the key belongs to.

  object

  2 fields

  • idrequired

    The organisation's id.

    string

  • namerequired

    The organisation's name.

    string

• sitesrequired

  Every site the key reaches, by name.

  array of objects

  5 fields in each

  • accessrequired

    What this key may do at the site.

    object

    2 fields

    • cataloguerequired

      Products, categories, modifiers, taxes and menus. read lists them; write also creates and changes them.

      string · one of "none", "read", "write"

    • ordersrequired

      Orders. read looks them up; write also sends new ones.

      string · one of "none", "read", "write"

  • currencyrequired

    The currency the site trades in, ISO 4217. Every amount at this site is in its minor units.

    string

  • idrequired

    The site's id. Every site-level path takes it.

    string

  • namerequired

    The site's name.

    string

  • timeZonerequired

    The site's time zone, IANA. Times in the API are UTC; this says what local time they are.

    string

curlJavaScriptPython

curl "https://api.dev.dnerohq.com/v1/me" \
  -H "Authorization: Bearer $DNERO_API_KEY"

const response = await fetch('https://api.dev.dnerohq.com/v1/me', {
  headers: {
    Authorization: `Bearer ${process.env.DNERO_API_KEY}`,
  },
})
const data = await response.json()

import os
import requests

response = requests.get(
    "https://api.dev.dnerohq.com/v1/me",
    headers={"Authorization": f"Bearer {os.environ['DNERO_API_KEY']}"},
)
data = response.json()

200OKapplication/json

{
  "key": {
    "expiresAt": "2027-10-22T00:00:00Z",
    "id": "6ad7bc857ea573b4d5412588",
    "name": "Website orders",
    "rateLimit": 120
  },
  "organisation": {
    "id": "52366491-9756-4f88-a166-b3c56b394835",
    "name": "Harbour Street Hospitality"
  },
  "sites": [
    {
      "access": {
        "catalogue": "none",
        "orders": "none"
      },
      "currency": "NZD",
      "id": "9a3c74c2-741e-48c3-ad9e-b137ec1c7243",
      "name": "Harbour Street",
      "timeZone": "Pacific/Auckland"
    }
  ]
}

401Unauthorizedapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#missing_key",
  "title": "Unauthorized",
  "status": 401,
  "detail": "No API key was sent.",
  "code": "missing_key"
}

403Forbiddenapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#key_revoked",
  "title": "Forbidden",
  "status": 403,
  "detail": "The key was revoked or switched off in the Dnero portal.",
  "code": "key_revoked"
}

429Too Many Requestsapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#rate_limited",
  "title": "Too Many Requests",
  "status": 429,
  "detail": "The key has used its requests for this minute.",
  "code": "rate_limited"
}

500Internal Server Errorapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#server_error",
  "title": "Internal Server Error",
  "status": 500,
  "detail": "Something went wrong on Dnero's side. It has been logged.",
  "code": "server_error"
}

502Bad Gatewayapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#upstream_unavailable",
  "title": "Bad Gateway",
  "status": 502,
  "detail": "Something Dnero depends on did not answer in time.",
  "code": "upstream_unavailable"
}

Examples use this site's API host. Keep the key in $DNERO_API_KEY; never paste it into code.