auth

Inspect Setup Token

Changed on

Report what an account-setup token is worth, without consuming it.

Rate Limited: 20 requests per minute per IP address — headroom for a mail gateway's link scanner plus the recipient's own page loads.

Does not require authentication; the token is the credential. Reading a token must never consume it: Microsoft Defender Safe Links fetches every URL in inbound mail before delivering it, so a consume-on-read token is spent by a scanner before the recipient ever opens the message.

post/api/v1/auth/setup-token/inspect

Request

  • Base URL
    https://api.maia-analytics.com (the document declares no server; this is the origin it was published from)
  • URL
    https://api.maia-analytics.com/api/v1/auth/setup-token/inspect
  • Auth
    none declared

Request body

tokenstring required

Response

Successful Response

status'valid' | 'expired' | 'used' | 'unknown' required
emailstring nullable

Changes