Skip to main content
POST
Validate an API key

Authentication

Pass an Outlit API key in the Authorization header as Bearer ok_....

Request body

No request body is required when validating the API key from the Authorization header.

Example

Success response

authorization.grants lists the key’s current capabilities. Only offer commands whose required authority appears in this list. createdById is null when the creator is unavailable.

Error responses

Invalid or disabled keys return 401:
If the credential store is temporarily unavailable, the endpoint returns 503 with the same failure envelope. Retry that response; it does not mean the key is invalid or revoked.

Authorizations

Authorization
string
header
required

Outlit API key (ok_...).

Response

Validated API-key context

valid
boolean
required
organizationId
string
required
createdById
string | null
required
authorization
object
required
organization
object
createdBy
object | null
apiKey
object