Get the current caller's identity, role, and KB clearance
Resolve the authenticated caller’s own identity, role, and KB clearance.
Authenticated only — no org-scope and no permission gate — so every role
(including org:viewer) can read its own context to drive UI gating.
Backend RBAC still enforces every mutation; this endpoint grants nothing.
Authorizations
Response
Successful Response
The authenticated caller's own identity + resolved role and KB clearance.
Returned by GET /identity/whoami so the dashboard can learn the caller's
role (Clerk org:*) and effective KB clearance for client-side gating
without an org-scoped or admin-only call. Backend RBAC remains the source of
truth for every mutation; this only drives UI affordances.