Inspect the caller

GET/v1/whoami

Confirm which identity and capabilities the access token resolved. scopes lists the caller’s own granted API scopes; an empty array means none. file_attachments_enabled is environment-wide; a session’s session_files_supported is the additional agent-specific check.

Generated from the Platform API specification on 2026-09-04.

Headers

Header	Required	Description
Authorization	yes	Bearer plus a short-lived OAuth access token issued for the Tanomis API audience. Backends obtain tokens with an organization automation client; the CLI’s human login is not an application credential.
X-Organization-ID	yes	The organization_id from the workspace projection you selected in GET /v1/me/workspaces.
X-Workspace-Tenant-ID	yes	The nested tenant_id from the same projection. A header cannot widen what the token grants. Some single-workspace or self-hosted environments take X-Tenant-ID instead, as supplied by their administrator.

Responses

Status	Meaning
200	The resolved identity.

Request

cURL

Terminal

curl -X GET "https://api.tanomis.com/v1/whoami" \
  -H "Authorization: Bearer $TANOMIS_TOKEN" \
  -H "X-Organization-ID: $TANOMIS_ORG" \
  -H "X-Workspace-Tenant-ID: $TANOMIS_WORKSPACE"

Python

import httpx

response = httpx.get(
    f"https://api.tanomis.com/v1/whoami",
    headers={
        "Authorization": f"Bearer {token}",
        "X-Organization-ID": organization_id,
        "X-Workspace-Tenant-ID": tenant_id,
    },
)
response.raise_for_status()
result = response.json()

TypeScript

const response = await fetch(`https://api.tanomis.com/v1/whoami`, {
  method: "GET",
  headers: {
    "Authorization": `Bearer ${token}`,
    "X-Organization-ID": organizationId,
    "X-Workspace-Tenant-ID": tenantId,
  },
});
if (!response.ok) throw new Error(`${response.status} ${await response.text()}`);
const result = await response.json();

Response

200 OK

{
  "subject": "usr_84af2c",
  "tenant_id": "customer-production",
  "is_admin": false,
  "scopes": [],
  "file_attachments_enabled": true
}