---
title: "External - Who am I"
method: GET
path: "/external/v1/whoami"
tags: ["External"]
---

# External - Who am I

`GET /external/v1/whoami`

**Auth:** Authenticated - any signed-in user.

Worked example of a scope-gated external endpoint. Returns the calling client's identity, granted permissions and allowed endpoints. Requires a bearer token from the external token endpoint, and the client must have been granted access to this path (enforced by ExternalApiAccessPreProcessor).

## Response `200`

Success

- GetWhoAmIResponse
  - `clientId` string, nullable
  - `displayName` string, nullable
  - `permissions` string[]
  - `allowedApis` string[]

## Other responses

- `401` — Unauthorized
- `403` — Client not granted access to this endpoint

---

[API](https://skmtc.net/tonbridge/apis/tonbridge-app-api.md) · [All operations](https://skmtc.net/tonbridge/apis/tonbridge-app-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/tonbridge/tonbridge-app-api/versions/28344aa564b4/schema)