Check authentication

Check whether the supplied credential resolves to an authenticated principal. This endpoint does not require a developer-key scope and does not grant access to other API routes.

GET/api/auth/check

HTTP referenceScope none (authenticated credential required)Updated September 27, 2026

This page documents the canonical HTTP contract for this endpoint.

A successful check verifies only this credential. Each other route still enforces its own scope and resource permissions.

Errors

Status	Meaning
401	Authentication is missing or invalid.

Example

bash

curl -X GET "https://app.autotouch.ai/api/auth/check" \
  -H "Authorization: Bearer $AUTOTOUCH_API_KEY"

Response example

json

{
  "ok": true,
  "auth_type": "developer_api_key",
  "user_id": "user-id",
  "email": "rep@example.com",
  "organization_id": "organization-id",
  "api_key_id": "key-id",
  "api_key_name": "Integration key",
  "granted_scopes": [
    "leads:read"
  ]
}