---
title: "Who this token belongs to"
method: GET
path: "/oauth/userinfo"
tags: ["Agent sign-in and A2A"]
---

# Who this token belongs to

`GET /oauth/userinfo`

## Request

- Base URL: `https://api.helious.io`
- URL: `https://api.helious.io/oauth/userinfo`
- Auth: OAuth 2 (authorization code, authorization URL `https://helious.io/oauth/authorize`, token URL `https://api.helious.io/oauth/token`, scopes: `openid`)

Returns sub always, and email plus the plan when the openid and account:read scopes were granted.

## Response `200`

claims

- object

## Other responses

- `401`: missing or expired token; the WWW-Authenticate header names the protected-resource metadata

---

[API](https://skmtc.dev/helious/apis/helious-public-api.md) · [All operations](https://skmtc.dev/helious/apis/helious-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/helious/apis/helious-public-api/revisions/06bada17ad7a?raw)