Skip to main content
POST
Validate API Key

Endpoint

Authentication

string
required
Outlit API key using the Bearer ok_... format.

Request Body

No request body is required when validating the API key from the Authorization header.

Example

Success Response

boolean
Whether the supplied API key is active and accepted.
string
Organization associated with the API key.
string | null
User that created the API key, when available.
string[]
Current capabilities granted to this API key. A consumer must only offer commands whose required authority appears in this list.

Error Responses

Invalid or disabled keys return 401:
If the credential store is temporarily unavailable, the endpoint returns 503 with the same failure envelope. Retry that response; it does not mean the key is invalid or revoked.