---
title: "Describe whoami"
method: GET
path: "/whoami"
---

# Describe whoami

`GET /whoami`

Returns an RS256-signed identity JWT for the authenticated user. The token's signature can be verified using the public keys served at /.well-known/jwks.json. Intended for downstream consumers (e.g. Convex) that need a verifiable user identity.

## Response `200`

OK

- DescribeWhoamiResponse
  - `$schema` string, uri — A URL to the JSON Schema for this object.
  - `expires_at` string, date-time, required — Absolute time at which the token expires.
  - `token` string, required — RS256-signed identity JWT scoped to the authenticated user. Verify against the public keys at /.well-known/jwks.json.

## Other responses

- `default` — Error

---

[API](https://skmtc.net/tower/apis/tower-api.md) · [All operations](https://skmtc.net/tower/apis/tower-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/tower/tower-api/revisions/0e42b0fb26d9/schema)