Current user

GET https://api.tiny.plus/me

Returns the person a token belongs to: their team member record, the account the token is acting for, what that person may see, and the account's integrations. This is the first call to make with a new token — it confirms the token works and tells you who and which account you're acting as.

/me sits beside /v2, not under it: the URL is https://api.tiny.plus/me. It always answers for the account the token belongs to. See Choosing an account.

curl "https://api.tiny.plus/me" \
  -H "Authorization: Bearer {{user_access_token}}"

{
    "id": "1231",
    "name": "Nick Smith",
    "email": "[e-mail]",
    "role": "Director",
    "timezone": "Australia/Sydney",
    "record_url": "https://crm.tiny.plus/staff/1231",
    "account": {
        "account_id": "3",
        "account_name": "Cupcake Architecture",
        "account_status": "active",
        "account_logo": "account_logos/44586e5c9d0bc6c26580aaf0e62effdb.jpg",
        "account_timezone": "Australia/Sydney"
    },
    "permissions": {
        "show_fees": true,
        "account_admin": true,
        "all_records": { "projects": true, "companies": true, "contacts": true }
    },
    "integrations": {
        "synergy": true,
        "relationship_plans": true,
        "ai_ask": true,
        "ai_ask_posts": true,
        "mcp": true
    },
    "api_features": ["linked_to", "lists"],
    "extra_accounts": []
}

id is the token user's team member id. It's the id to send as staff, assigned_user or created_user elsewhere in the API, and the one their own records are created under.

The response

Alongside the fields below, the response carries the person's full team member record — the same fields as a GET /v2/staff/{id}, such as mobile, linkedin and timezone. See Team Members.

Field	Description
id	The person's team member id.
name, email, role	Their name, email address and job title.
timezone	The person's own time zone. Stamps in the API are still UTC; see Requests.
account	The account the token is acting for: account_id, account_name, account_status, account_logo (a storage path, not a URL) and account_timezone.
permissions	What this person may see. See Permissions.
integrations	Which integrations the account has switched on (see below).
api_features	Newer parts of the API that this one has: the list parameter linked_to, and lists for the Lists endpoints. An older API ignores a parameter it doesn't know and answers 404 for an endpoint it doesn't have, so check here before relying on one.
extra_accounts	The person's other accounts, when the token isn't limited to one. Empty for a token issued for a single account, which is the usual case. Each entry repeats account, permissions and integrations for that account.

permissions

Key	Meaning
show_fees	Whether this person sees fee values in tiny+. The API returns fee fields either way, so hide them in your own screens when this is false.
account_admin	Whether this person is an admin of this account. Only an admin can set created_user, modified_user, created_date or modified_date to anything but their own. See Permissions.
all_records	For projects, companies and contacts: whether this person may see the whole account's pipeline statistics. It doesn't change which records a list returns.

integrations

Each is true when the account has that integration switched on.

Key	Meaning
synergy	Total Synergy sync.
relationship_plans	Relationship plans, which come with the Pro plan.
lists	Lists. false only on an account that has Lists hidden from its menu.
ai_ask	The Ask feature, for turning plain English into filters.
ai_ask_posts	Ask over the News Feed.
mcp	The MCP server — true only when this person holds an AI Assistants seat and the account's switch is on.

Errors

A missing, malformed, expired or revoked token gives 401, in the OAuth error shape:

{
    "error": "access_denied",
    "error_description": "The resource owner or authorization server denied the request.",
    "hint": "Missing \"Bearer\" token"
}

See Errors.