Account

curl "https://herculeradar.com/api/v1/account" \
  --header "Authorization: Bearer hr_live_…"

Tool name get_account. It takes the same input and returns the same { data, meta } envelope as REST, because both call the same function.

The authenticated owner and every project this credential can see.

{
  "data": {
    "owner_id": "uuid",
    "projects": []
  },
  "meta": {
    "capability": "get_account",
    "requestId": "req_9f2b4a8c1d0e",
    "idempotencyReplayed": false,
    "docs": "https://herculeradar.com/docs/reference/get_account"
  }
}

Requires the projects:read scope. A credential without it gets 403 FORBIDDEN. Resources in projects the credential cannot reach answer 404 NOT_FOUND rather than 403, so ids cannot be probed across tenants.