Skip to main content
GET
Validates the API key and returns the tenant identity, granted scopes, and key metadata. Use this to verify your key works and see which scopes are granted.
  • Auth: x-api-key header (required)
  • Rate limit: global only
Call /v2/scopes to see all available scopes (with tiers), then /v2/whoami to see what your key has. The gap tells you what to request. Common error responses:
  • 401 when x-api-key header is missing or the key is invalid
  • 403 when using a legacy static key (no tenant identity)