Identity ID
Kind
Roles (comma-separated)
Scopes (comma-separated)
Purpose
API Token (memory only — lost on reload, never stored)
Every request to /knowledge/* sends these as x-kaos-identity-*/x-kaos-purpose headers. API Token, if set, is sent as x-kaos-api-key and kept in memory only for this tab.