agentrouter.identity.v1.MeService
MeService is the caller-bound surface -- every RPC operates on the
authenticated identity, with no path-level identity selector. The
CLI's ia whoami, ia keys ..., ia login consume this.
ChangePassword
ChangePassword sets a new password for the signed-in caller, who must
Login
Login initiates an OIDC authorization-code + PKCE flow. Returns an
Logout
Logout invalidates the caller's current OIDC session. Subsequent
RequestPasswordReset
RequestPasswordReset emails a single-use reset link. The response is the
ResetPassword
ResetPassword consumes a reset token and sets the new password. The token
SendVerificationEmail
SendVerificationEmail re-sends the verification link. The response is the
SignInWithPassword
SignInWithPassword exchanges an email and password for a session. Serves
SignUpWithPassword
SignUpWithPassword creates an account with an email and password and sends
VerifyEmail
VerifyEmail consumes a verification link and marks the address verified.
GetMe
GetMe returns the full identity record for the authenticated caller.
UpdateMe
UpdateMe changes the signed-in caller's own display name
ListMyKeys
ListMyKeys lists all API keys belonging to the caller. Returns
IssueMyKey
IssueMyKey issues a new long-lived API key for the caller. The
RevokeMyKey
RevokeMyKey permanently and irrevocably revokes an API key.
UpdateMyKey
UpdateMyKey replaces the scope set of a caller-owned management key
ResolveMyPermissions
ResolveMyPermissions returns every RBAC permission the calling identity
ListMyProjects
ListMyProjects lists the projects the calling identity can access within
ListMyReachableProjects
ListMyReachableProjects returns the bare project ids the calling identity
GetPermissionCatalog
GetPermissionCatalog returns the seeded permission vocabulary grouped by
CreateUser
CreateUser provisions a user identity (an authn.user row). Admin-scoped