Returns the identity and permissions of the current API key.
x-api-key header (required)/v2/scopes to see all available scopes (with tiers), then /v2/whoami
to see what your key has. The gap tells you what to request.
Common error responses:
401 when x-api-key header is missing or the key is invalid403 when using a legacy static key (no tenant identity)