API Reference

User Profile

Read and update the authenticated user's record. These endpoints require both org credentials and a user session.

GET/partner/users/me

🔑 Org key + secret👤 User session

Returns the authenticated user's record (the ssn field is stripped).

200 · Response
{
  "id": "firebase-uid", "partner_id": "uuid", "email": "john@example.com",
  "phone_number": "+15551234567", "first_name": "John", "last_name": "Doe",
  "date_of_birth": "1995-06-15", "address": { },
  "upwardli_consumer_id": "...", "kyc_status": "approved",
  "metadata": {}, "is_active": true, "created_at": "...", "updated_at": "..."
}

PATCH/partner/users/me

🔑 Org key + secret👤 User session

Body — all optional: first_name, last_name, date_of_birth, address, secondary_address, metadata. (id, partner_id, email, phone_number cannot be changed here.) Returns the updated user record.

PATCH/partner/users/me/profile-picture

🔑 Org key + secret👤 User session

multipart/form-data with a single file field named profile_picture.

cURL · upload avatar
curl -X PATCH 'https://dev.qwikcard.co/api/v1/partner/users/me/profile-picture' \
  -H 'X-Partner-Key: ...' -H 'X-Partner-Secret: ...' -H 'Authorization: Bearer ...' \
  -F 'profile_picture=@/path/to/avatar.png'
200 · Response
{
  "profile_picture_url": "https://.../avatar.png"
}