Whoami

GET /api/v1/whoami

Returns the organization that the API key authenticates as. Useful for tooling that stores a local profile alias and needs to resolve it to the real server-side org (id, slug, name).

Unlike other endpoints, whoami is not gated on a model permission — any valid, unexpired key can identify itself.

Example Request

curl -X GET "https://statements.finopsbricks.com/api/v1/whoami" \
  -H "api-key: fob_stm_xxxxxxxxxxxx" \
  -H "api-secret: xxxxxxxxxxxxxxxx"

Response

{
  "data": {
    "org_id": "P8nxj0gb9hlF",
    "org_slug": "alex",
    "org_name": "Alex"
  }
}

Response Fields

FieldTypeDescription
org_idstringStable organization ID (never changes)
org_slugstringURL slug (changes only on org rename)
org_namestringDisplay name of the organization

Errors

CodeDescription
401Invalid, missing, or expired API credentials