/workspaces

List the workspaces the authenticated user can view.

This is a discovery endpoint, with two consequences for how it is called:

• Authentication must be an OAuth 2.0 bearer token. API key authentication is not accepted, because API-key requests require a workspace ID and this is a pre-workspace discovery route.
• The x-air-workspace-id header is not required, since the purpose of the call is to discover which workspaces are available before any workspace-scoped call is made.

Results are filtered to workspaces the authenticated principal has permission to view.

Requires the workspace.read OAuth scope.