> ## Documentation Index
> Fetch the complete documentation index at: https://docs.igrisecurity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Verify an API key

> Checks the key you send as `Authorization: Bearer ig_...` and returns its user and organization. No session is needed.

<Warning>
Verify does not check that the key's creator is still a member. A key whose creator left still returns `200` here, while every other route returns `401` for it.
</Warning>

**Required permission:** none beyond a valid key.




## OpenAPI

````yaml /api-reference/openapi.yaml get /api/v1/api-keys/verify
openapi: 3.1.0
info:
  title: Igris Management API
  version: '1'
  description: >-
    REST API for managing Igris connections, policies, sessions, audit events
    and alerts.
servers:
  - url: https://api.igrisecurity.com
security:
  - bearerAuth: []
tags:
  - name: Connections
  - name: Policies
  - name: Sessions
  - name: Audit Events
  - name: Incidents
  - name: Webhooks
  - name: API Keys
  - name: Members
  - name: LLM Providers
  - name: LLM Cost
  - name: Observe
paths:
  /api/v1/api-keys/verify:
    get:
      tags:
        - API Keys
      summary: Verify an API key
      description: >
        Checks the key you send as `Authorization: Bearer ig_...` and returns
        its user and organization. No session is needed.


        <Warning>

        Verify does not check that the key's creator is still a member. A key
        whose creator left still returns `200` here, while every other route
        returns `401` for it.

        </Warning>


        **Required permission:** none beyond a valid key.
      operationId: verifyApiKey
      responses:
        '200':
          description: The key is valid.
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    type: object
                    properties:
                      user:
                        type: object
                        properties:
                          id:
                            type: string
                          email:
                            type: string
                          name:
                            type: string
                      org:
                        type: object
                        properties:
                          id:
                            type: string
                          name:
                            type: string
                          plan:
                            type: string
                      apiKey:
                        type: object
                        properties:
                          id:
                            type: string
                          name:
                            type: string
              example:
                data:
                  user:
                    id: usr_123
                    email: alice@company.com
                    name: Alice
                  org:
                    id: org_123
                    name: Acme
                    plan: growth
                  apiKey:
                    id: key_123
                    name: CI key
        '401':
          description: No key, or the key is invalid or revoked.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
              example:
                error: Invalid or revoked API key
components:
  schemas:
    Error:
      type: object
      required:
        - error
      properties:
        error:
          type: string
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: ig_...
      description: >-
        An Igris API key. It acts with the current role and permission overrides
        of the member who created it.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.