`GET /whoami`

Reports whether the token is scoped and, if so, the policy the daemon enforces for it.

### Authorizations

- `bearerAuth` — HTTP bearer. Daemon API key. Omit on a keyless loopback daemon.

### Responses

**200** — OK

`application/json`:

- `policy` Policy · optional
  - `allow_profiles` array of string · optional
  - `max_fork` integer · optional
  - `max_memory_mib` integer · optional
  - `max_sandboxes` integer · optional
  - `max_timeout_s` integer · optional
  - `max_vcpus` integer · optional
  - `net_allow_max` array of string | null · optional
  - `operations` array of string · optional
- `scoped` boolean · optional