Skip to main content
GET
Identify the presented credential

Authorizations

Authorization
string
header
required

Send Authorization: Bearer tst_live_….

Format (services/api-keys.ts): the literal prefix tst_live_ followed by 24 random bytes rendered as 32 base64url characters. Only the SHA-256 hash is stored server-side. The shape check that routes a token down the API-key path rather than the Clerk JWT path requires the tst_live_ prefix and a total length of at least 25 characters.

Keys are minted in the dashboard at /settings/team. The same header also accepts a Clerk session JWT, which is how the web app authenticates, but the JWT path is out of scope for this document.

Response

OK

user
object
required
organization
MeOrganization · object
required

Backwards-compatible alias of currentOrg with identical content. Prefer currentOrg in new integrations.

currentOrg
MeOrganization · object
required

For an API key, always the organization the key is bound to, every request in this document is scoped to it.

personalOrg
MeOrganization · object
required

The caller's auto-provisioned personal workspace. Not necessarily the org an API key acts on.