# Account endpoint

Use authenticated `GET /v1/me` to confirm identity, plan, usage counters, and feature access for the current token.

```bash
curl https://api.foxora.ai/v1/me \
  -H "Authorization: Bearer $FOXORA_ACCESS_TOKEN"
```

1. Check the HTTP status before reading fields.
2. Confirm `id` or `email` belongs to the intended account.
3. Read `plan`, `plan_type`, and `cycle` as current account context.
4. Treat `usage` and `features` as service-provided state, not a locally calculated entitlement.
5. Store the response only as long as the application needs it.

Account fields can grow over time. Parse the properties your client uses and tolerate additional JSON fields. Never log the Authorization header alongside the response.

**Expected result:** a valid token returns the intended account; an invalid token returns `401` and no identity or plan details.