Skip to main content
GET
Check the access token

Authorizations

Authorization
string
header
required

A gbr_pat_ access token. Scopes are recorded on the token when it is minted.

Response

Check the access token and report what it may do.

object
string
required

Always health. Names the shape, so a value can be identified without knowing which call returned it.

Allowed value: "health"
status
string
required

Always ok, and structurally unable to be anything else — it reports that this deployment answered, which is all a health check can promise about itself. It is not a verdict on your token. usable is.

Allowed value: "ok"
version
string
required
Allowed value: "v1"
scopes
enum<string>[]
required

What the presented token may do. Empty means it may do nothing here.

Available options:
cli,
sessions:read,
sessions:write,
tools:respond,
artifacts:read,
credentials:write
usable
boolean
required

Whether this token can do anything under /v1 at all. false for one holding only cli, which is a real token for gobare pi import and refused by every route here. That token reads {"status":"ok","scopes":["cli"]} and then 403s on the first real call — the signal was in scopes all along, but only for a caller who already knew what to compare it against.

missing_scopes
enum<string>[]
required

What to mint instead, named rather than inferred. Empty when usable is true.

Available options:
cli,
sessions:read,
sessions:write,
tools:respond,
artifacts:read,
credentials:write