Skip to main content
GET
/
api-keys
/
whoami
Inspect the calling API key (caller introspection)
curl --request GET \
  --url https://api.mnemom.ai/v1/api-keys/whoami \
  --header 'X-Mnemom-Api-Key: <api-key>'
{
  "user_id": "<string>",
  "email": "<string>",
  "key_id": "<string>",
  "account_id": "<string>",
  "org_id": "<string>",
  "scopes": [
    "<string>"
  ],
  "is_admin": true
}

Authorizations

​
X-Mnemom-Api-Key
string
header
required

Mnemom API key (mnm_... format)

Response

Caller identity.

Caller introspection — the principal authenticated for this request. Returned by GET /v1/api-keys/whoami. The handler is generalized across cookie, jwt, and api_key auth methods, so the API-key-specific fields (key_id, account_id, scopes) are null on cookie/JWT principals.

​
user_id
string
required

Authenticated principal identifier (Supabase user UUID for cookie/JWT auth; api-key-bound user UUID for api_key auth).

​
auth_method
enum<string>
required
Available options:
cookie,
jwt,
api_key
​
email
string | null
​
key_id
string | null

API key id (e.g. mnk_...), or null for cookie/JWT auth.

​
account_id
string | null

Billing account id, or null for cookie/JWT auth.

​
org_id
string | null
​
scopes
string[] | null

Capability scopes (ADR-049) for api-key auth; null for cookie/JWT. e.g., ['gateway.send', 'gateway.observe'].

​
is_admin
boolean | null