Describe the API key's organization and granted scopes
Returns the organization the API key belongs to, the scopes granted to the key, and the catalog of resources/actions the platform API exposes. Requires a valid API key but no specific scope - use it to verify a key and discover what it can access.
A full-access key holds the single wildcard scope *. Test a capability against effectiveScopes, which expands the wildcard, rather than against scopes, which reports the grant verbatim.
Authorizations
Organization-scoped bearer credential: a customer API key (1club_sk_live_...) or an MCP OAuth access token.
Response
API key identity and granted scopes
Describes the authorized organization, the scopes granted to the bearer credential, and the catalog of available platform resources.
Scopes granted to the bearer credential - an API key or an MCP OAuth grant - exactly as held (e.g. "classes:read"). A full-access key holds the single wildcard scope ""; read effectiveScopes to see what that resolves to. An MCP grant never holds "": the wildcard is expanded at consent so each capability can be shown and approved.
True when the credential holds the wildcard scope "*", granting every scope including ones added after it was issued.
The scopes this credential can actually use - identical to scopes for a narrow grant, and the full expansion of "*" for a full-access key. Check a capability against this list, not scopes.
Catalog of resources and the actions each supports.