Authorization header as a Bearer Token or it will return a 401 Unauthorized
HTTP status.
Use the endpoint to inspect what
user an Access Token is authenticated for.
GET /users/me:
Tokens
Use a token
Pass an access token in the Authorization header of a Box API call, and check which user the token represents.
Every authenticated API call requires an Access Token to be passed in the
The official SDKs pass the token for you once the client is initialized. For
example, to call
Last modified on September 25, 2026