Token sub. A person under authorization_code; the client under client_credentials.
OptionalorganizationOrganization identifier from the access token's org_id claim.
OptionalsessionSession identifier from the access token's sid claim.
Distinguishes a person from a machine client so tools do not store a client id as a user id.
Verified Scalekit caller exposed to authenticated MCP callbacks.