Skip to main content
GET
Describe the API key's organization and granted scopes

Authorizations

Authorization
string
header
required

Organization-scoped bearer credential: a customer API key (1club_sk_live_...) or an MCP OAuth access token.

Response

API key identity and granted scopes

Describes the authorized organization, the scopes granted to the bearer credential, and the catalog of available platform resources.

organization
object
scopes
string[]

Scopes granted to the bearer credential - an API key or an MCP OAuth grant - exactly as held (e.g. "classes:read"). A full-access key holds the single wildcard scope ""; read effectiveScopes to see what that resolves to. An MCP grant never holds "": the wildcard is expanded at consent so each capability can be shown and approved.

fullAccess
boolean

True when the credential holds the wildcard scope "*", granting every scope including ones added after it was issued.

effectiveScopes
string[]

The scopes this credential can actually use - identical to scopes for a narrow grant, and the full expansion of "*" for a full-access key. Check a capability against this list, not scopes.

resources
object[]

Catalog of resources and the actions each supports.