# Inspect the caller

GET /v1/whoami: Confirm which identity and capabilities the access token resolved.

GET<code>/v1/whoami</code>

Confirm which identity and capabilities the access token resolved. `scopes` lists the caller's own granted API scopes; an empty array means none. `file_attachments_enabled` is environment-wide; a session's `session_files_supported` is the additional agent-specific check.

Generated from the Platform API specification on 2026-09-04.

## Headers

| Header | Required | Description |
|---|---|---|
| `Authorization` | yes | `Bearer` plus a short-lived OAuth access token issued for the Tanomis API audience. Backends obtain tokens with an [organization automation client](/guides/run/authenticate-your-backend); the CLI's human login is not an application credential. |
| `X-Organization-ID` | yes | The `organization_id` from the workspace projection you selected in `GET /v1/me/workspaces`. |
| `X-Workspace-Tenant-ID` | yes | The nested `tenant_id` from the same projection. A header cannot widen what the token grants. Some single-workspace or self-hosted environments take `X-Tenant-ID` instead, as supplied by their administrator. |

## Responses

| Status | Meaning |
|---|---|
| `200` | The resolved identity. |

## Request

```bash
curl -X GET "https://api.tanomis.com/v1/whoami" \
  -H "Authorization: Bearer $TANOMIS_TOKEN" \
  -H "X-Organization-ID: $TANOMIS_ORG" \
  -H "X-Workspace-Tenant-ID: $TANOMIS_WORKSPACE"
```

```python
import httpx

response = httpx.get(
    f"https://api.tanomis.com/v1/whoami",
    headers={
        "Authorization": f"Bearer {token}",
        "X-Organization-ID": organization_id,
        "X-Workspace-Tenant-ID": tenant_id,
    },
)
response.raise_for_status()
result = response.json()
```

```typescript
const response = await fetch(`https://api.tanomis.com/v1/whoami`, {
  method: "GET",
  headers: {
    "Authorization": `Bearer ${token}`,
    "X-Organization-ID": organizationId,
    "X-Workspace-Tenant-ID": tenantId,
  },
});
if (!response.ok) throw new Error(`${response.status} ${await response.text()}`);
const result = await response.json();
```

## Response

```json title="200 OK"
{
  "subject": "usr_84af2c",
  "tenant_id": "customer-production",
  "is_admin": false,
  "scopes": [],
  "file_attachments_enabled": true
}
```