---
title: "Authenticate Token"
method: POST
path: "/v1/authn"
tags: ["Authentication"]
---

# Authenticate Token

`POST /v1/authn`

Validate a WorkOS JWT and return the principal context.

## Response `200`

Successful Response

- PrincipalContextEntity — Principal context representing an authenticated user or service user. The member_id is: - For human users: WorkOS user ID (e.g., "user_xyz") - For service users: Service user ID (e.g., "svc_abc123") This is the primary identifier used for authorization checks in OpenFGA.
  - `api_key_id` string, nullable
  - `email` string, nullable
  - `is_service_user` boolean
  - `member_id` string, required
  - `name` string, nullable
  - `org_id` string, nullable
  - `role` string, nullable

---

[API](https://skmtc.net/terminaluse/apis/sb0-api.md) · [All operations](https://skmtc.net/terminaluse/apis/sb0-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/terminaluse/sb0-api/revisions/f24a474dc415/schema)