microscopic-painter-84459
09/18/2024, 8:33 PMbrief-egg-61061
09/18/2024, 8:33 PMbrief-egg-61061
09/18/2024, 8:33 PMPOST /admin/identities
](https://www.ory.sh/docs/reference/api#operation/createIdentity) - [GET /admin/identities
](https://www.ory.sh/docs/reference/api#operation/listIdentities) - [GET /admin/identities/{id}
](https://www.ory.sh/docs/reference/api#operation/getIdentity) - [PUT /admin/identities/{id}
](https://www.ory.sh/docs/reference/api#operation/updateIdentity) You would need an API Key to call these endpoints. You can read more about [Authorization with API Keys](https://www.ory.sh/docs/concepts/personal-access-token) in the Ory documentation. Please refer to the [Ory SDK documentation](https://www.ory.sh/docs/guides/upgrade/sdk-v1) for more details on how to use the SDK to interact with these APIs.microscopic-painter-84459
09/18/2024, 8:35 PMwhoami
or calling `toSession()`:
There are two types of identity metadata:
Public: Attributes that can only be modified using the /admin/identities APIs. They are visible to anyone having access to the user's sessions, for example by calling toSession() or /sessions/whoami. This allows you to access the metadata in the frontend without calling the admin APIs.
Admin: Attributes that can only be modified and read using the /admin/identities APIs.