---
title: "Confirm a key authenticates and return the workspace it belongs to. Records verification, not usage."
method: POST
path: "/api/v1/connection/verify"
tags: ["connection"]
---

# Confirm a key authenticates and return the workspace it belongs to. Records verification, not usage.

`POST /api/v1/connection/verify`

Requires no scope — any valid key can verify itself. Stamps api_keys.verified_at and emits mcp_connection_verified; deliberately does NOT touch last_used_at or emit api_call, so checking a key can never make it look like an agent used it. Prefer this over calling a data endpoint to test credentials.

## Response `200`

OK — the key authenticates; returns { ok, workspaceId, name, scopes }

- object

## Other responses

- `401` — Invalid/expired API key, or no Bearer key and no valid session cookie
- `500` — Unexpected internal error

---

[API](https://skmtc.dev/pathmode/apis/pathmode-api.md) · [All operations](https://skmtc.dev/pathmode/apis/pathmode-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/pathmode/pathmode-api/revisions/e419abb0a327/schema)