Whoami
GET /api/v1/whoami
Returns the organization that the API key authenticates as. Useful for tooling that stores a local profile alias and needs to resolve it to the real server-side org (id, slug, name).
Unlike other endpoints, whoami is not gated on a model permission — any valid,
unexpired key can identify itself.
Example Request
curl -X GET "https://statements.finopsbricks.com/api/v1/whoami" \
-H "api-key: fob_stm_xxxxxxxxxxxx" \
-H "api-secret: xxxxxxxxxxxxxxxx"
Response
{
"data": {
"org_id": "P8nxj0gb9hlF",
"org_slug": "alex",
"org_name": "Alex"
}
}
Response Fields
| Field | Type | Description |
|---|---|---|
| org_id | string | Stable organization ID (never changes) |
| org_slug | string | URL slug (changes only on org rename) |
| org_name | string | Display name of the organization |
Errors
| Code | Description |
|---|---|
| 401 | Invalid, missing, or expired API credentials |