Auth

Validate an access key and fetch account context

Validates the bearer token and returns the associated account + key context. Primary caller is skillrepo init at CLI setup time; also used by skillrepo auth validate to verify a token without performing any other action.

Scope: none — any valid key can self-introspect, regardless of its read/write scope set. The rate-limit bucket (cli-crud, 60/min) is the abuse gate against key-probing attacks.

post/api/v1/auth/validate

Request

  • Base URL: https://skillrepo.dev
  • URL: https://skillrepo.dev/api/v1/auth/validate
  • Auth: HTTP bearer

Headers

X-SkillRepo-Source'init' | 'validate'

Caller identification header. init is sent by skillrepo init so server-side metering can distinguish bootstrap from verify traffic. Missing/unknown values default to the cli.validate event type.

Response

Key is valid.

userIdstring required
accountIdstring required
accountSlugstring required

URL-safe slug for the account (lowercase, hyphenated).

accountNamestring required
scopesstring[] required

Scopes granted to the key. Includes registry:read and/or registry:write.

keyIdstring required

Opaque identifier for the access key. Used by the Connect usage card to attribute usage back to specific keys.

tierstring required

Account plan tier (e.g. free, team). Informational for the CLI — not enforced client-side.

Changes

No recorded changes to this operation across all 1 revision of this API.