Introspect the calling key's scopes and the API's policy
GET/api/v1/meta
Returns the calling key's granted scopes plus the contract version, the full scope vocabulary, and the rate-limit policy. Requires a valid bearer key but NO specific scope — it reveals only the key's own grants and public constants, never tenant data. Rate-limited.
Responses
- 200
- 401
- 429
- 503
Key + API metadata
Response Headers
Per-minute request ceiling for this key's tier.
Requests left in the current window (floored at 0).
Seconds until the window resets.
Missing or invalid API key
429 — RATE_LIMITED (per-key limit, reads and writes alike; fails closed,
so a limiter outage also returns 429). A limiter-down 429 is deliberately
indistinguishable from a quota 429. Carries Retry-After (seconds).
Response Headers
Seconds to wait before retrying (429 only).
Per-minute request ceiling for this key's tier.
Requests left in the current window (floored at 0).
Seconds until the window resets.
The products API is disabled on this environment