IndyKite ContX IQ - whoami (resolve the caller's IKG subject)

Every ContX IQ (CIQ) execution or AuthZEN decision that carries a user access token runs on behalf of the IKG node that Token Introspect resolved from the token. GET /contx-iq/v1/whoami returns that resolution - the node type and the subject id - and nothing else, so a client can see and reuse the exact subject IndyKite will use, without parsing the JWT or re-implementing the Token Introspect configuration.

It is a read-only identity probe: no Knowledge Query runs, no graph data is read or written, and no decision is made.

When to use

Activate this skill when the user wants to:

• know which IKG node a user token resolves to - "who am I to IndyKite?", "what subject.type / subject.id does this token map to?";
• build subject-bound requests for that user - the pair becomes the subject.type / subject.id values of an indykite-authzen-evaluation, -evaluations, or indykite-authzen-search-* request sent with the same bearer token;
• debug Token Introspect - confirm that ikg_node_type and sub_claim (or the default sub) produce the node you expect, e.g. across several identity providers;
• explain a 403 "bearer token subject differs from requested subject" on a 3.0-kbac decision - whoami shows the subject the token actually carries.

Do not activate this skill when the user wants to: