A first call
user identifies the human (when there is one), token describes the credential that authenticated this request, and workspace is the tenant the call resolves to.
Endpoint
Returns the current principal: user, token id and scopes, active workspace.Behavior notes
| Principal | What workspace resolves to |
|---|---|
Workspace API key (gak_live_*, gak_test_*) | The workspace the key was minted against. Always the same workspace for the life of the key. |
OAuth session token (gst_*) | The workspace active when the session was established or last switched. Use POST /v1/workspaces/{slug}/switch to change it. |
token.scopes list is exhaustive — every scope the token holds is included.
Related
Workspaces
Enumerate accessible workspaces and switch the active context for OAuth sessions.