---
title: "Get caller's key context"
method: GET
path: "/tenants/{tenant_id}/api_keys/context"
tags: ["API Keys"]
---

# Get caller's key context

`GET /tenants/{tenant_id}/api_keys/context`

Returns metadata about the API key making this call: role, permissions, expiry, IP allowlist. Lets an autonomous agent introspect its own authority before attempting actions.

## Path parameters

- `tenant_id` integer, required

## Response `200`

Calling API key context and permissions

- ApiKeyDetails
  - `allowed_ips` string[], required
  - `created_at` string, date-time, required — Resource creation timestamp (RFC 3339 UTC).
  - `division_id` integer
  - `division_name` string
  - `expiry_at` string, date-time, required — Expiration timestamp (RFC 3339 UTC).
  - `id` integer, required
  - `name` string, required
  - `role_id` integer, required
  - `role_name` string, required
  - `user_id` integer, required
  - `validate_ip` boolean, required
  - `permissions` RolePermissionsInfo, required
    - `division` string[], required
    - `divisions` object, required
    - `environment` string[], required
    - `tenant` string[], required

## Other responses

- `401` — Caller is not authenticated via API key

---

[API](https://skmtc.net/laserdata/apis/laserdata-cloud-core-api.md) · [All operations](https://skmtc.net/laserdata/apis/laserdata-cloud-core-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/laserdata/laserdata-cloud-core-api/revisions/db81a447bba9/schema)