Returns the one Kalpana workspace this connection covers, chosen when the user connected: its ID, name, slug, the user's role, and what that role allows here, both as permission codes and in plain words (for example whether it can render batches). Every other tool works in this workspace, so none takes a workspace ID. A missing permission explains a 403 from another tool, such as run_batch without renders:create. Working in another workspace needs a reconnect that chooses it. Needs workspaces:read.