Skip to main content
GET
Who am I

Authorizations

Authorization
string
header
required

Biscuit-based bearer token. Obtain tokens from the Adaptyv Portal or via the /tokens endpoint. Tokens encode organization membership and role-based capabilities; the API verifies the token's cryptographic signature and authorization claims before processing requests. Use /tokens/attenuate to create restricted tokens for delegation.

Response

Caller identity and access summary

Identity and access summary for the calling token.

organizations
object[]
required

Every organization the token can access. For most tokens this is a single organization; exactly one entry is flagged active.

permissions
string[]
required

The permissions this token grants, as resource:action strings (for example experiment:create). Use these to learn what the token can do before attempting an operation.

Example:
active_organization_id
string<uuid> | null

Identifier of the organization the token is currently acting as. This is the organization flagged active: true in organizations.

Example:

"019b8da3-4a91-16c6-fa94-619212bee6a6"

token_expires_at
string<date-time> | null

When the token expires (ISO 8601 / RFC 3339, UTC). null for tokens without a recorded expiry.

Example:

"2026-12-31T23:59:59Z"

user_id
string<uuid> | null

The authenticated user's unique identifier.

Example:

"019b8da3-1111-2222-3333-444455556666"