# Show this access

> The access this call is made with: account, main or sub access, authentication, expiry, what it may do.

- Effect: Read - Changes nothing.
- Idempotent: yes
- Stability: beta
- MCP tool: `manitu_access_get` on https://mcp.manitu.de/mcp
- REST: `POST https://api.manitu.de/v1/access/get`
- Page: /reference/access/get/

## MCP tool

`manitu_access_get`

### Description for the model

Tells which manitu customer account this connection works in, and through which access: the account id (it is also the customer number the customer knows), the access id (main or sub access), how the connection authenticated, and until when; for a key also what it may do (access_level: read only, write, or write without confirmation) and which ways in it can use (rest, mcp). Call it first when you need to know whose account you act in, before telling the customer which account a later answer refers to, or when a change is refused and you need to know whether this key may change anything at all. It returns no contact or contract data - no name, no address, no products.

### Arguments

Takes no arguments.

### Example

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "manitu_access_get",
    "arguments": {}
  }
}
```

## REST

`POST https://api.manitu.de/v1/access/get`

### Authentication

One of `X-API-Key`, `Authorization: Bearer …` - never more than one in a request.

### Request body

JSON; unknown fields are refused.

No fields - send {} or no body.

### Response

In `data`; the rest of the body as on every call.

- `account_id` (integer, required) - The customer account - its id is also its customer number.
- `account_user_id` (integer, required) - The access on that account this call is made with.
- `credential_type` (string, required) - What this call was made with. (one of `"session"`, `"apikey"`, `"oauth"`)
- `auth_strength` (string, required) - How the access authenticated. (one of `"password"`, `"tfa"`, `"token"`, `"oauth"`)
- `expires_at` (string | null, required) - When the credential ends at the latest (ISO 8601), or null.
- `access_level` (string | null, required) - What a key may do: read only; write, with what needs a confirmation refused; or write without confirmation. null for a session. (one of `"read"`, `"write"`, `"write_unconfirmed"`, `null`)
- `facade` (string | null, required) - The way this call came: rest or mcp; null if not known. (one of `"rest"`, `"mcp"`, `null`)
- `usable_channel_list` (array of string, required) - The ways in this credential can use now: rest and mcp for a key; panel for a session - its sign-in to the customer panel, which also covers calls made with the session over REST (a session never works over MCP). A way not listed is closed for it - the customer sets the ways in in the customer panel.

### Statuses

- `200` Success.
- `400` The request does not match the declared input schema.
- `401` No credential was presented, or it was not recognised.
- `403` The credential is not permitted to use this operation.
- `500` The server failed. Nothing about the request was wrong. Whether a change took effect is not known - check before trying it again.
- `503` The channel this operation forwards through is unavailable.

### Example

```sh
curl -X POST 'https://api.manitu.de/v1/access/get' \
  -H 'X-API-Key: $API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{}'
```

## Example result

```json
{
  "account_id": 12345,
  "account_user_id": 12345,
  "credential_type": "session",
  "auth_strength": "password",
  "expires_at": "2026-10-23T12:00:00+02:00",
  "access_level": "read",
  "facade": "rest",
  "usable_channel_list": [
    "panel"
  ]
}
```