List My Organizations

GET /auth/me/organizations

The organizations this person holds a principal in — theirs, not the catalogue.

GET /organizations answers “what tenants exist”, floors at operator and reaches them through the audited hatch. It is therefore not an answer an ordinary member can get, and until this route there was none: a person with a seat in two organizations (RULE U-1 makes that two principals) had no way to ask which ones were theirs, which is why the OAuth consent screen offered whichever one the console happened to be showing (D-5514).

Unpaginated on purpose. The set is bounded by SEAT_LIMIT and is a person’s own membership, not a listing that grows with the deployment. total counts the seats the person holds rather than the ones that fit, so a reader over that bound sees total run ahead of items instead of being told a short list is the whole of it (D-5515).

Role floor

Requires viewer or above. The floor is a minimum, not a grant: scope filtering still applies on top of it, and a resource in another tenant answers 404 rather than 403.

Responses

Status	Description	Body
200	Successful Response	Page_PrincipalOrganization_

Only the success paths are declared

Any operation may also answer any status in the error catalogue, and every failure body is the platform envelope — including the 422 this document types as HTTPValidationError.

Example

curl -X GET https://your-deployment.example.com/auth/me/organizations \
  -H "Authorization: Bearer $COBRE_TOKEN"

Response — Page_PrincipalOrganization_

Field	Type		Notes
items	PrincipalOrganization[]	required	—
next_cursor	string | null	optional	—
total	integer | null	optional	—