Current principal
Auth type plus, for API keys, the org and project scoped to the key.
Authorizations
Project API key (sk-kupe-...) or a Supabase user JWT.
Response
Successful Response
Caller identity derived from the verified Principal.
API keys are always scoped to one org + project, so SDK clients can list agents without the caller passing those IDs. JWT (dashboard) callers are not project-scoped; org_id and project_id are null.
Credential type: project API key (sk-kupe-...) or a Supabase user JWT.
api_key, jwt Org scoped to this API key. Null for JWT callers.
Project scoped to this API key. Null for JWT callers.
Supabase user id. Set for JWT callers.
API key row id. Set for API-key callers.

