---
title: "Verify a Sendinel-issued embed token (server-to-server, for embedding platforms)"
method: GET
path: "/embed/token/validate"
---

# Verify a Sendinel-issued embed token (server-to-server, for embedding platforms)

`GET /embed/token/validate`

## Request

- Base URL: `https://sendinel.ai/api/v1`
- URL: `https://sendinel.ai/api/v1/embed/token/validate`
- Auth: one of:
  - HTTP bearer
  - OAuth 2 (authorization code, authorization URL `https://sendinel.ai/oauth/authorize`, token URL `https://sendinel.ai/oauth/token`)

Non-consuming (peek) validation — the same token may be checked repeatedly across a full embed session, not just once. Auth via Authorization Bearer header or embed_token query param.

## Query parameters

- `embed_token` string

## Response `200`

Token is valid — returns the project and scopes it grants

- object
  - `project_id` string, uuid
  - `scopes` string[]

## Other responses

- `401`: Embed token missing, invalid, or expired
- `403`: Embed token does not grant the required scope

---

[API](https://skmtc.dev/sendinel/apis/sendinel-api.md) · [All operations](https://skmtc.dev/sendinel/apis/sendinel-api/llms.txt) · [OpenAPI document](https://skmtc.dev/sendinel/apis/sendinel-api/revisions/20b2c6d5616d?raw)