Skip to main content
GET
Get what the app opens to, and the theme

Authorizations

x-api-key
string
header
required

Raw API key shown once when created in the Allocait app (Settings > API keys). Send it verbatim in this header; the server stores and compares only its SHA-256 hash. Allocait generates every key: alc_ followed by 64 lowercase hex characters. Keys issued before 2026-10-10 are 64 hex characters with no prefix and keep working. A key may carry an expiry (90 days or 1 year, or never). A malformed, unknown, revoked or expired key gets 401 with no further detail, and a malformed one is refused before any lookup. Keys cannot be created through this API.

Response

object | null

The caller's preferences, or null if the row somehow doesn't exist yet (every account is seeded one at signup, but nothing enforces it can never be absent).

The caller's active portfolio/scenario/watchlist/chart/playbook/monitor and theme. Every page in the app falls back to this row to decide what to show by default.

id
string<uuid>
user_id
string<uuid>
active_portfolio_id
string<uuid> | null
active_scenario_id
string<uuid> | null
active_watchlist_id
string<uuid> | null
active_chart_id
string<uuid> | null
active_playbook_id
string<uuid> | null
active_monitor_id
string<uuid> | null
theme
enum<string>
Available options:
light,
dark,
system
onboarding_pinned
boolean | null
onboarding_completed_at
string<date-time> | null
created_at
string<date-time>
updated_at
string<date-time>