---
title: "Check API key access"
method: GET
path: "/health"
tags: ["Authentication"]
---

# Check API key access

`GET /health`

## Request

- Base URL: `https://contracko.com/api/v1`
- URL: `https://contracko.com/api/v1/health`
- Auth: one of:
  - API key in header `x-contracko-api-key`
  - HTTP bearer

Verify that your API key is valid and return the workspace and access attached to it.

## Response `200`

API key verified.

- object
  - `status` 'ok', required: Health status for the authenticated API key
  - `timestamp` string, date-time, required: ISO-8601 timestamp generated by the API
  - `keyId` string, required: Unique identifier for the API key
  - `keyName` string, nullable: Label assigned to the API key
  - `scopes` string[], required: Access granted to the API key
  - `workspace` object: Connected workspace summary, returned to MCP connections only
    - `name` string, nullable, required: Connected workspace name
    - `contractManagement` object: Bounded Contract Management refusal and recovery hint; the credential remains valid
      - `refusalReason` 'subscription_inactive' | 'api_disabled' | 'not_member', required
      - `hint` string, required
    - `contracts` object: Visible contract counts; present only with contract read access
      - `real` integer, required: Contracts added by the workspace
      - `examples` integer, required: Example contracts seeded for onboarding, titled "Example: ..."

## Other responses

- `401`: Authentication failed (missing, invalid, revoked, or expired API key).
- `429`: Retry later because the request rate limit was reached.
- `500`: The server could not complete the request.

---

[API](https://skmtc.dev/contracko/apis/contracko-parsing-api.md) · [All operations](https://skmtc.dev/contracko/apis/contracko-parsing-api/llms.txt) · [OpenAPI document](https://skmtc.dev/contracko/apis/contracko-parsing-api/revisions/2f90b1d3cafd?raw)