Who am I
GET/api/v1/whoami
curl -X GET 'https://www.unitpost.com/api/v1/whoami' \
-H 'Authorization: Bearer YOUR_API_KEY' \
-H 'User-Agent: my-app/1.0'{
"object": "whoami",
"workspace": {
"id": "id_123",
"name": "Example",
"slug": "string"
},
"credential": {
"type": "api_key",
"id": "id_123",
"name": "Example",
"prefix": "string",
"scope": "full",
"created_at": "2026-01-01T00:00:00.000Z",
"last_used_at": "2026-01-01T00:00:00.000Z",
"client_id": "client_123",
"client_name": "string",
"user": "string"
},
"capabilities": [
"string"
],
"rate_limit": {
"limit": 1,
"window_seconds": 0
}
}The calling credential: its workspace, the API key (name, prefix, scope preset) or the OAuth sign-in (the app and the member it acts for), the capabilities it may use after every clamp, and the workspace's rate limit. Call it first to plan within what the credential may do instead of learning by 403. Never returns the secret. Requires no capability: any valid credential may call it.
Response · 200 fields5 fields
| Field | Type | Description |
|---|---|---|
objectrequired | string | — |
workspacerequired | object | — |
credentialrequired | object | Never the secret. |
capabilitiesrequired | string[] | What this credential may do, after every clamp: a call that needs another one answers 403 `insufficient_scope`. |
rate_limitrequired | object | — |