Verify an API key

GET

/v1/check-key

Validates the supplied api_key or public_key and returns {verified: true, status: "success"}, plus opt-in extras per query toggle: check_plan adds remove_branding, check_credits adds credits_remaining (prepaid + subscription credits summed), get_token adds the widget signed-proof triple (XSRF-TOKEN, MFCLIENTID, SIGNED-PROOF, also set as cookies). Used by integrations and the widget to verify auth before issuing further calls. For account name, plan, and named credit buckets, see GET /v1/organization.

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Query Params

Responses

🟢200

application/json

Key verification result

Bodyapplication/json

🟠400

🟠401

🟠403

🟠429

🔴500

🔴503

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://api.mailfloss.com/v1/check-key?api_key=&public_key=&check_plan=&get_token=&check_credits=' \
--header 'Authorization: Bearer <token>'

Response Example

200 - Success

{
    "verified": true,
    "status": "success",
    "remove_branding": true,
    "credits_remaining": 7500
}

Modified at 2026-10-20 13:54:45

Account activity timeline

Read the authenticated account holder