Introspect the authenticated API key

​

Return the identity and effective scopes bound to the caller's key.

Any valid key can call this (no scope requirement) — it's how an integration discovers what it's allowed to do before trying.

Headers

  • Optional. The /v1 URL prefix already selects the version; send this only for an extra check. Unsupported values return 400.

Responses

  • application/json
  • application/json
Request Example for get/v1/me
curl https://api.arbitr.ai/v1/me \
  --header 'X-API-Version: 1' \
  --header 'X-API-Key: YOUR_SECRET_TOKEN'
{
  "org_id": "string",
  "mode": "live",
  "scopes": [
    "string"
  ]
}