PApapr-ai
v1
Cloud Infrastructure

Validate Papr login or share token for cloud mini-app access

Changed on
post/v1/cloud/apps/access/validate

Request

  • Base URL
    https://memory.papr.ai
  • URL
    https://memory.papr.ai/v1/cloud/apps/access/validate
  • Auth
    • API key in header X-API-Key
    • or HTTP bearer

Request body

external_user_idstring nullable

Parse _User.objectId of the acting user (desktop OAuth). Used for ownership-scoped cloud operations instead of the API key user.

namespaceIdstring required
slugstring required
orgIdstring nullable
userIdstring nullable
appIdstring nullable
paprApiKeystring nullable
shareTokenstring nullable
callerEmailstring nullable

Session email for share-audience people allowlists (defense in depth)

Response

Successful Response

allowedboolean
ownerKeystring nullable
orgIdstring required
namespaceIdstring required
userIdstring required
appIdstring required
modestring required
canReadboolean required
canWriteboolean required
canInstallCodeboolean
rolestring nullable
callerUserIdstring nullable

Acting caller resolved by memory (session user, or API key user / validated external_user_id). Hosts use this, never a raw header claim.

Changes

  • 6fc381dc78b3Revision changes
    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

  • 85b2953e02c4Revision changes
    • info

      added the optional property to the response with the status