List this account's memberships

Every newsletter this account has a place on, and the role it holds there. It answers "which teams am I on"; GET /newsletters/{newsletter}/members answers "who is on this team" and needs settings: read instead.

Needs account: read, which either an API key or an OAuth token can carry. A credential without it is refused whatever newsletters it reaches. One with it reads the account it belongs to and no other: there is no parameter here in which to name a person.

A row can name a newsletter no other operation will let this credential address. Each row is the person's own membership and says nothing about that newsletter beyond an identifier, nor anything about anybody else on its team.

The owner of a newsletter appears here with the owner role, the same membership GET /newsletters/{newsletter}/members emits.

newsletter is a reference, and ?expand=newsletter replaces it with a NewsletterSummary: handle, name, description and artwork, all of which that newsletter's own page already shows anybody. Expanding widens nothing else, so a newsletter this credential holds no grant on stays unreadable through GET /newsletters/{newsletter}.