Get Principal

GET /principals/{principalId}

Returns one authorized principal and its strong version.

Required scope

Any authenticated access token

principalIdstringRequired: Server-assigned principal identifier or its final ID segment.

Stored resource returned; authorized retries replay the same committed response for 24 hours.

401 UNAUTHORIZED

Authentication required.

Obtain a valid access token, then retry.

403 FORBIDDEN

Permission denied.

Check the linked account and its permissions for the device or resource.

404 NOT_FOUND

Principal not found.

Verify the target identifier and that its endpoint or plugin route still exists.