> ## Documentation Index
> Fetch the complete documentation index at: https://doc.featherhq.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get the current caller's identity, role, and KB clearance

> Resolve the authenticated caller's own identity, role, and KB clearance.

Authenticated only — no org-scope and no permission gate — so every role
(including ``org:viewer``) can read its own context to drive UI gating.
Backend RBAC still enforces every mutation; this endpoint grants nothing.



## OpenAPI

````yaml /api-reference/openapi.json get /v1/identity/whoami
openapi: 3.1.0
info:
  title: Feather API
  description: >-
    Unified customer experience platform API. Manages identity, conversations,
    memory, agents, procedures, policies, model routing, knowledge bases,
    integrations, and runtime execution.
  version: 1.21.0
servers:
  - url: https://api-sandbox.featherhq.com
    description: Sandbox
  - url: http://localhost:8000
    description: Local dev
security: []
paths:
  /v1/identity/whoami:
    get:
      tags:
        - identity
      summary: Get the current caller's identity, role, and KB clearance
      description: >-
        Resolve the authenticated caller's own identity, role, and KB clearance.


        Authenticated only — no org-scope and no permission gate — so every role

        (including ``org:viewer``) can read its own context to drive UI gating.

        Backend RBAC still enforces every mutation; this endpoint grants
        nothing.
      operationId: whoAmI
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WhoAmIResponse'
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '401':
          description: Authentication required
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
        - APIKeyHeader: []
components:
  schemas:
    WhoAmIResponse:
      properties:
        user_id:
          type: string
          format: uuid
          title: User Id
        clerk_user_id:
          type: string
          title: Clerk User Id
        email:
          anyOf:
            - type: string
            - type: 'null'
          title: Email
        display_name:
          anyOf:
            - type: string
            - type: 'null'
          title: Display Name
        role:
          type: string
          title: Role
        organization_id:
          type: string
          format: uuid
          title: Organization Id
        organization_name:
          type: string
          title: Organization Name
        kb_clearance_level:
          type: integer
          title: Kb Clearance Level
        kb_acl_enabled:
          type: boolean
          title: Kb Acl Enabled
      type: object
      required:
        - user_id
        - clerk_user_id
        - role
        - organization_id
        - organization_name
        - kb_clearance_level
        - kb_acl_enabled
      title: WhoAmIResponse
      description: >-
        The authenticated caller's own identity + resolved role and KB
        clearance.


        Returned by ``GET /identity/whoami`` so the dashboard can learn the
        caller's

        role (Clerk ``org:*``) and effective KB clearance for client-side gating

        without an org-scoped or admin-only call. Backend RBAC remains the
        source of

        truth for every mutation; this only drives UI affordances.
    ErrorResponse:
      properties:
        error:
          type: string
          title: Error
        message:
          type: string
          title: Message
      type: object
      required:
        - error
        - message
      title: ErrorResponse
      description: Standard error response returned by all API error handlers.
  securitySchemes:
    APIKeyHeader:
      type: apiKey
      in: header
      name: x-api-key

````