> ## Documentation Index > Fetch the complete documentation index at: https://docs.attio.com/llms.txt > Use this file to discover all available pages before exploring further. # Identify > Identify the current access token, the workspace it is linked to, and any permissions it has. Every kind of Attio access token can be introspected: - **Workspace access tokens**, created from a workspace's settings. These have no OAuth client, so `client_id` and `aud` contain the workspace access token's own ID. - **OAuth access tokens**, granted to an app through the OAuth 2.0 authorization code flow. `client_id` and `aud` contain the app ID. - **App access tokens**, issued to an app installation and exposed to that app's server functions as `ATTIO_API_TOKEN`. `client_id` and `aud` contain the app ID. Per [RFC 7662](https://www.rfc-editor.org/rfc/rfc7662), `active` is the only member guaranteed to be present. `exp` is always `null`, because Attio access tokens do not currently expire. All other members are optional, and are omitted rather than returned as `null` when they are not present. Unknown, revoked, and deleted tokens are not treated as an error. They return `200` with `{"active": false}` and no other members. ## OpenAPI ````yaml https://api.attio.com/openapi/api get /v2/self openapi: 3.1.0 info: title: Attio API version: 2.0.0 contact: name: Attio Support email: support@attio.com url: https://attio.com/help servers: - url: https://api.attio.com description: Production security: - oauth2: [] tags: - name: Objects description: >- Objects are the core data models inside of Attio. They contain standard objects, such as [people](/rest-api/endpoint-reference/standard-objects/people/list-person-records), [companies](/rest-api/endpoint-reference/standard-objects/companies/list-company-records) or [deals](/docs/standard-objects-deals), and custom objects that are specific to your use-case. See our [objects and lists guide](/docs/objects-and-lists) for more information. - name: Object views description: Object views are saved table or board layouts for an object. - name: List views description: List views are saved table or board layouts for a list. - name: Attributes description: >- Attributes model properties of objects and lists. Some attributes, such as the `name` attribute on a person, are system-defined, while others are user-defined. Attributes are one of [many types](/docs/attribute-types) such as text, location or select. See our [objects and lists guide](/docs/objects-and-lists) for more information. - name: Records description: >- Records are individual instances of objects e.g. a specific [person](/rest-api/endpoint-reference/standard-objects/people/list-person-records) or [company](/rest-api/endpoint-reference/standard-objects/companies/list-company-records). See our [objects and lists guide](/docs/objects-and-lists) for more information. - name: SCIM groups description: >- SCIM groups represent Attio teams managed through the SCIM provisioning protocol. - name: SCIM schemas description: >- SCIM schemas describe the resource types supported by the SCIM service provider. - name: SCIM users description: >- SCIM users represent workspace members managed through the SCIM provisioning protocol. - name: Lists description: >- Lists are used to model a particular process. A list contains many records of a single object type, where each record is represented by an entry. Entries contain their own data from attributes defined on the list and also data from their parent record. See our [objects and lists guide](/docs/objects-and-lists) for more information. - name: Meta description: Meta endpoints are used to get information about the API token. - name: Entries description: >- Entries are elements in a list that reference a single parent record. Entries contain their own data from attributes defined on the list and also data from their parent record. See our [objects and lists guide](/docs/objects-and-lists) for more information. - name: Files description: >- Files are documents and folders linked to records, stored either in Attio or connected via external storage providers. - name: Workspace members description: >- Workspace members represent a user with access to a workspace. Workspace members are assigned roles that determine what they can do within the workspace. - name: Notes description: Notes are rich text documents that reference a single parent record. - name: Meetings description: >- Meetings are events synced from your calendar, added manually or added from third-party integrations. - name: Emails description: >- Emails are messages synced from connected mailboxes. This API exposes their metadata — participants, subject line and timestamps — and never their content. - name: Call recordings description: >- Call recordings store video, audio, transcript and speaker information for calls. They are linked to meetings. - name: Transcripts description: >- Transcripts contain the speech segments and speaker information for a call recording. They are linked to call recordings. - name: Tasks description: >- A task is a defined, actionable item with references to linked records and assigned workspace members. - name: Webhooks description: >- Webhooks allow you to listen for changes to data in Attio, for example when a record is updated. - name: Threads description: >- Threads are groups of [comments](/rest-api/endpoint-reference/comments/get-a-comment) on either a record or entry. - name: Comments description: >- Comments are messages on a [thread](/rest-api/endpoint-reference/threads/list-threads). - name: People description: >- People are one of the core objects inside of Attio. Person records can be added to lists and can be created automatically when syncing your mailbox. - name: Companies description: >- Companies are one of the core objects inside of Attio. Company records can be added to lists and can be created automatically when syncing your mailbox. - name: Users description: >- Users are an optional standard object that represents a user of your system. Users can belong to many workspaces. - name: Deals description: >- Deals are an optional standard object that represent a deal or opportunity. - name: Workspaces description: >- Workspaces are an optional standard object that represent a workspace or account in your system. Workspaces have many users and can be used to model a multi-tenant system. A company record can optionally have multiple workspaces. - name: SQL description: >- Query records and list entries across your workspace using SQL. A single query can reference any object or list in the workspace. paths: /v2/self: get: tags: - Meta summary: Identify description: >- Identify the current access token, the workspace it is linked to, and any permissions it has. Every kind of Attio access token can be introspected: - **Workspace access tokens**, created from a workspace's settings. These have no OAuth client, so `client_id` and `aud` contain the workspace access token's own ID. - **OAuth access tokens**, granted to an app through the OAuth 2.0 authorization code flow. `client_id` and `aud` contain the app ID. - **App access tokens**, issued to an app installation and exposed to that app's server functions as `ATTIO_API_TOKEN`. `client_id` and `aud` contain the app ID. Per [RFC 7662](https://www.rfc-editor.org/rfc/rfc7662), `active` is the only member guaranteed to be present. `exp` is always `null`, because Attio access tokens do not currently expire. All other members are optional, and are omitted rather than returned as `null` when they are not present. Unknown, revoked, and deleted tokens are not treated as an error. They return `200` with `{"active": false}` and no other members. responses: '200': description: Success content: application/json: schema: anyOf: - type: object properties: active: type: boolean enum: - false required: - active - type: object properties: active: type: boolean enum: - true description: Whether the token is currently active and usable. scope: type: string description: >- A space-separated list of scopes associated with this token client_id: type: string description: >- Identifies the client the token was issued to. For app access tokens this is the app ID. Workspace access tokens have no OAuth client, so this is the workspace access token ID. token_type: type: string enum: - Bearer description: The type of token, always Bearer. exp: type: - number - 'null' description: >- The time at which this token will expire, if set, as a number of seconds since January 1 1970 UTC. Attio access tokens do not currently expire, so this is always null. iat: type: number description: >- The time at which this token was issued, as a number of seconds since January 1 1970 UTC. sub: type: string format: uuid description: >- Since Bearer tokens grant Workspace-level permissions, this property contains the workspace_id. aud: type: string description: >- The intended audience for this token, for Bearer tokens this is the same as the client_id. iss: type: string enum: - attio.com description: The issuer of the token. Always attio.com authorized_by_workspace_member_id: type: string format: uuid description: >- The ID of the workspace member who authorized this token initially. Almost every token has one, but it is omitted for the app access tokens that Attio created itself rather than on a member's behalf. workspace_id: type: string format: uuid description: The ID of the workspace the token is scoped to. workspace_name: type: string description: The name of the workspace the token is scoped to. workspace_slug: type: string description: The slug of the workspace the token is scoped to. workspace_logo_url: type: - string - 'null' format: uri description: The logo URL of the workspace the token is scoped to. required: - active - scope - client_id - token_type - exp - iat - sub - aud - iss - workspace_id - workspace_name - workspace_slug - workspace_logo_url examples: Workspace access token: summary: A token created from workspace settings value: active: true scope: >- object_configuration:read-write record_permission:read-write client_id: 3b9d6c14-72af-4e08-8d5b-0a7f2e91c463 token_type: Bearer exp: null iat: 1672585200 sub: 14beef7a-99f7-4534-a87e-70b564330a4c aud: 3b9d6c14-72af-4e08-8d5b-0a7f2e91c463 iss: attio.com authorized_by_workspace_member_id: 50cf242c-7fa3-4cad-87d0-75b1af71c57b workspace_id: 14beef7a-99f7-4534-a87e-70b564330a4c workspace_name: Salarya workspace_slug: salarya workspace_logo_url: null App access token: summary: >- An OAuth access token, or an app installation's ATTIO_API_TOKEN value: active: true scope: note:read-write record_permission:read-write client_id: 1e4a3f7c-8d29-4b51-9e0f-6c3a5d8b21e7 token_type: Bearer exp: null iat: 1672585200 sub: 14beef7a-99f7-4534-a87e-70b564330a4c aud: 1e4a3f7c-8d29-4b51-9e0f-6c3a5d8b21e7 iss: attio.com authorized_by_workspace_member_id: 50cf242c-7fa3-4cad-87d0-75b1af71c57b workspace_id: 14beef7a-99f7-4534-a87e-70b564330a4c workspace_name: Salarya workspace_slug: salarya workspace_logo_url: null Inactive token: summary: An unknown, revoked, or deleted token value: active: false components: securitySchemes: oauth2: type: oauth2 description: This API uses OAuth 2.0 with the authorization code grant flow. flows: authorizationCode: authorizationUrl: https://app.attio.com/authorize tokenUrl: https://app.attio.com/oauth/token scopes: user_management:read: View workspace members. user_management:read-write: View workspace members. record_permission:read: View, and optionally write, records. record_permission:read-write: View, and optionally write, records. object_configuration:read: >- View, and optionally write, the configuration and attributes of objects. object_configuration:read-write: >- View, and optionally write, the configuration and attributes of objects. list_entry:read: View, and optionally write, the entries in a list. list_entry:read-write: View, and optionally write, the entries in a list. list_configuration:read: >- View, and optionally write, the configuration and attributes of lists. list_configuration:read-write: >- View, and optionally write, the configuration and attributes of lists. public_collection:read: >- View, and optionally write, both the settings and information within public collections. public_collection:read-write: >- View, and optionally write, both the settings and information within public collections. private_collection:read: >- View, and optionally modify, both the settings and information of all collections within the workspace, regardless of their access settings. private_collection:read-write: >- View, and optionally modify, both the settings and information of all collections within the workspace, regardless of their access settings. comment:read: View comments (and threads), and optionally write comments. comment:read-write: View comments (and threads), and optionally write comments. task:read: View, and optionally write, tasks. task:read-write: View, and optionally write, tasks. note:read: View, and optionally write, notes. note:read-write: View, and optionally write, notes. meeting:read: View, and optionally write, meetings. meeting:read-write: View, and optionally write, meetings. call_recording:read: >- View, and optionally write, call recordings, transcripts and speakers for meetings. call_recording:read-write: >- View, and optionally write, call recordings, transcripts and speakers for meetings. webhook:read: View, and optionally manage, webhooks. webhook:read-write: View, and optionally manage, webhooks. file:read: View, and upload files. file:read-write: View, and upload files. email:read: View email metadata. Email content is never exposed. email:read-write: View email metadata. Email content is never exposed. ````