---
title: "Describe the calling API key"
method: GET
path: "/api_keys/whoami"
tags: ["API Keys"]
---

# Describe the calling API key

`GET /api_keys/whoami`

Return metadata about the API key authenticating this request, including its scopes. The plaintext secret is never returned.

## Response `200`

Metadata describing the calling API key.

- ApiKey
  - `id` string, uuid, required — The unique identifier for this API key.
  - `type` 'Public' | 'Private', required — Whether the key was created programmatically (Private) or via the Dashboard (Public).
  - `owner_type` 'Developer', required — The type of entity that owns the key. Always `Developer`.
  - `owner_id` string, uuid, required — The developer ID that owns the key.
  - `prefix` 'sk-live' | 'sk-test', required — The environment prefix of the key. `sk-live` in production, `sk-test` in sandbox.
  - `last_4` string, required — The last four characters of the key, shown alongside the prefix for disambiguation in audit logs.
  - `state` 'Active' | 'Deleted', required — Lifecycle state of the key.
  - `created_at` string, date-time, required
  - `updated_at` string, date-time, required
  - `scopes` string[], required — The scopes authorized on this key. A single-element list containing `bridge:api_unrestricted` denotes an unrestricted key (all standard scopes). Any other list denotes a scoped key.
  - `name` string — The human-readable label for this key, if one was provided at creation.

## Other responses

- `401` — Missing or invalid API key
- `500` — Unexpected error. User may try and send the request again.

---

[API](https://skmtc.net/bridge/apis/bridge-api.md) · [All operations](https://skmtc.net/bridge/apis/bridge-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/bridge/bridge-api/revisions/570998bde3b5/schema)