Identity
Introspect the current key
“Does my key work, and what can it do?” — the canonical first request an integration makes. Any valid, active key may call it; no scope required. Never returns the secret, only non-sensitive metadata.
GET
Introspect the current key
Authorizations
A Custral secret API key (sk_…), created in Settings → Applications. Sent as Authorization: Bearer sk_…. The X-Api-Key: sk_… header is also accepted and takes precedence. Never expose a secret key in a browser.