What the identity in the Authorization header stands for [identity]

Only a session's workspace identity (Bearer wid_…, delivered to the pod beside each turn) may ask: its session, workspace, role, expiry, the route groups a token from the exchange may call, and the installed connectors with whether its role is granted each.