diff --git a/vault/app/api/auth/me/route.ts b/vault/app/api/auth/me/route.ts
new file mode 100644
index 0000000..2ff5554
--- /dev/null
+++ b/vault/app/api/auth/me/route.ts
@@ -0,0 +1,7 @@
+import { NextResponse } from "next/server";
+import { getCurrentUser } from "@/lib/server-security";
+
+export async function GET() {
+  const user = await getCurrentUser();
+  return NextResponse.json({ user });
+}