identity

Get the current caller's identity, role, and KB clearance

Resolve the authenticated caller's own identity, role, and KB clearance.

Authenticated only — no org-scope and no permission gate — so every role (including org:viewer) can read its own context to drive UI gating. Backend RBAC still enforces every mutation; this endpoint grants nothing.

get/v1/identity/whoami

Response

Successful Response

user_idstring uuid required
clerk_user_idstring required
emailstring nullable
display_namestring nullable
rolestring required
organization_idstring uuid required
organization_namestring required
kb_clearance_levelinteger required
kb_acl_enabledboolean required
is_internalboolean

Changes

Changed in 1 of the 3 revisions of this API.5

    • added the optional property is_internal to the response with the 200 status

      response-optional-property-added

    • added the optional property retry_after to the response with the 400 status

      response-optional-property-added

    • added the optional property retry_after to the response with the 401 status

      response-optional-property-added

    • added the optional property retryable to the response with the 400 status

      response-optional-property-added

    • added the optional property retryable to the response with the 401 status

      response-optional-property-added

    This revision also has 40 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog