Resolve your identity and roles
Returns your identity and roles for the current request.
Send a request with an Authorization: Bearer <token> or Authorization-PSK: <psk> header to
get back your username, email, roles, and how you authenticated. Use this to verify your credentials
work correctly and to check your effective roles.
This is the REST alternative to the MCP whoami tool, which serves the same purpose for AI agents.
Authorizations
The access token received from the authorization server in the OAuth 2.0 flow.
Response
Successful Response
Identity resolved by the API for the current request.
Mirrors the MCP whoami tool: echoes back the caller's identity and
the auth method that matched, so clients can verify their Bearer / PSK
wiring and discover their effective roles.
Keycloak subject identifier of the caller.
Which credential resolved the identity.
keycloak_token, user_psk, general_psk Username for user context. Equals 'psk' for the general PSK.
Caller's email, if known.
Caller's full name, if known.
Realm roles assigned to the caller.
Client roles assigned to the caller.

