---
title: "Validate current API key"
method: GET
path: "/api/v1/auth/validate"
tags: ["Authentication"]
---

# Validate current API key

`GET /api/v1/auth/validate`

Validate the API key provided in the request and return detailed information about the key, user, and organization.

## Query parameters

- `include_usage` boolean, nullable — Include detailed usage statistics

## Response `200`

API key validation result

- object
  - `success` true, required
  - `timestamp` number, required
  - `valid` boolean, required — Whether the API key is valid
  - `apiKey` object
    - `id` string, required — API key ID
    - `name` string, required
    - `permissions` string[], required
    - `expiresAt` number — Expiration timestamp
    - `lastUsed` number — Last usage timestamp
    - `usage` object, required
      - `totalRequests` integer, required
      - `dailyRequests` integer, required
      - `hourlyRequests` integer, required
      - `rateLimitStatus` object, required
        - `requestsPerMinute` object, required
          - `limit` integer, required
          - `remaining` integer, required
          - `resetAt` number, required — Rate limit reset timestamp
        - `requestsPerHour` object, required
          - `limit` integer, required
          - `remaining` integer, required
          - `resetAt` number, required — Rate limit reset timestamp
        - `requestsPerDay` object, required
          - `limit` integer, required
          - `remaining` integer, required
          - `resetAt` number, required — Rate limit reset timestamp
  - `user` object
    - `id` string, required — Internal user ID
    - `publicId` string, required — Public user identifier
    - `organizationId` string, required — Organization ID
    - `role` 'admin' | 'auction_manager' | 'bidder' | 'read_only', required
    - `createdAt` number, required — Account creation timestamp
    - `isActive` boolean, required — Account status
  - `organization` object
    - `id` string, required — Internal organization ID
    - `publicId` string, required — Public organization identifier
    - `name` string, required — Organization name
    - `settings` object, required
      - `rateLimitTier` 'basic' | 'standard' | 'premium' | 'enterprise', required
      - `apiKeyQuota` integer, required
      - `biddingEnabled` boolean, required
    - `memberCount` integer, required
    - `createdAt` number, required — Organization creation timestamp
    - `isActive` boolean, required — Organization status
  - `warnings` string[] — Security warnings

## Other responses

- `400` — Bad Request - Invalid input parameters
- `401` — Unauthorized - Invalid or missing API key
- `403` — Forbidden - Insufficient permissions
- `404` — Not Found - Resource not found
- `429` — Too Many Requests - Rate limit exceeded
- `500` — Internal Server Error

---

[API](https://skmtc.net/manifoldfinance/apis/xga-auction-system-api.md) · [All operations](https://skmtc.net/manifoldfinance/apis/xga-auction-system-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/manifoldfinance/xga-auction-system-api/revisions/329190dccb50/schema)