You and your company

GET/v1/organisation

The company, the shops this key reaches, and its people where the key's maker may see them.

What it does

People are listed by name and role name only, and only when the person who made the key may see people in the app. A key never reads an email address or a phone number here.

Who may call it

A key whose maker's role holds figures (see the figures), after the fence, for the shop or category it names.

Request

HTTP
GET https://panlytics.net/api/v1/organisation

Parameters

NameInTypeRequiredWhat it is
AuthorizationheaderstringYesBearer, a space, then the key.

Example request

curl https://panlytics.net/api/v1/organisation \
  -H "Authorization: Bearer $PANLYTICS_KEY"

Response

200: The answer, as JSON.

FieldTypeAlways thereWhat it is
idintegerYesThe company's id.
namestringYesThe company's name.
countrystring or nullYesThe country the company is in, or null.
currencystringYesThe company's currency, as a three-letter code.
shops[]object[]YesThe shops this key reaches.
shops[].idintegerYesThe shop's id.
shops[].namestringYesWhat the shop is called, as people in the company say it.
shops[].branchstringYesThe branch name, or empty.
shops[].citystringYesThe city the shop is in.
shops[].countrystringYesThe country the shop is in, or empty.
shops[].createdAtstring (ISO 8601)YesWhen the shop was made, in UTC.
people[]object[] or nullYesNames and role names only, and only when the person who made the key may see people in the app. Never an email address or a phone number. Null otherwise.
people[].namestringYesThe person's name.
people[].rolestringYesThe name of their role.

Example response

200
{
  "id": 3,
  "name": "Example Oy",
  "country": "Finland",
  "currency": "EUR",
  "shops": [
    {
      "id": 12,
      "name": "Harbour",
      "branch": "",
      "city": "Helsinki",
      "country": "Finland",
      "createdAt": "2026-10-01T08:00:00.000Z"
    }
  ],
  "people": [
    {
      "name": "Anna Virtanen",
      "role": "Manager"
    }
  ]
}

Errors

A refusal is JSON with a code, a sentence in error, and a requestId when the fault is ours. Read the code, not the sentence. Every code is listed on Errors.

StatusCodeWhenWhat to do
401api.key_missingThe call had no Authorization header.Send the key in the Authorization header as Bearer, then call again.
401api.key_refusedThe key is wrong, revoked, past its end, or its maker or company no longer allows it (developer mode off, the maker removed or switched off, or the maker's role lost the developer ability).Ask the person who gave you the key to make a new one.
401api.wrong_key_kindThis key does not open these endpoints.Use the key these endpoints were made for, or ask the person who gave you the key.
403refusedThe key's maker may not do this here: their role lacks the ability, or the shop or category is outside their reach.Ask the CEO for a role that allows it, or call it for a shop or category the role reaches.
403auth.not_freshThis step needs you to prove it is you.Confirm your password or passkey, then try again.
429api.rate_limitedThe key made more than 120 calls in this minute. Wait the seconds in Retry-After.Wait the seconds in Retry-After, then call again.
500serverSomething failed on our side. The answer carries a requestId to quote.Try again in a minute; if it keeps happening, report it.
503developer.unavailableAPI keys are not set up on this deployment yet.Report it, and we will switch them on.