POST /api/project/v1/sdk/backend/key/authenticate/

curl --request POST \
  --url http://localhost:8000/api/project/v1/sdk/backend/key/authenticate/ \
  --header 'X-OTAS-SDK-KEY: otas_aBcDeFgH_vErYlOnGsEcReTvAlUeHeRe'

{
  "status": 1,
  "status_description": "authenticated",
  "response": {
    "project": {
      "id": "b2c3d4e5-f6a7-8901-bcde-f12345678901",
      "name": "My Agent App",
      "description": "Production project for the recommendation agent"
    }
  }
}

{
  "status": 0,
  "status_description": "invalid_sdk_key"
}

curl --request POST \
  --url http://localhost:8000/api/project/v1/sdk/backend/key/authenticate/ \
  --header 'X-OTAS-SDK-KEY: otas_aBcDeFgH_vErYlOnGsEcReTvAlUeHeRe'

{
  "status": 1,
  "status_description": "authenticated",
  "response": {
    "project": {
      "id": "b2c3d4e5-f6a7-8901-bcde-f12345678901",
      "name": "My Agent App",
      "description": "Production project for the recommendation agent"
    }
  }
}

{
  "status": 0,
  "status_description": "invalid_sdk_key"
}

This endpoint accepts a backend SDK key via the X-OTAS-SDK-KEY header and, if valid, returns the associated project details. It is called by the Brain service to authorize incoming agent event requests, but you can also use it directly to confirm that a key is active, unexpired, and correctly formed before deploying it to a production environment.

This endpoint does not require a user JWT. It authenticates solely via the X-OTAS-SDK-KEY header. No request body is needed.

Request

Method: POST
URL: http://localhost:8000/api/project/v1/sdk/backend/key/authenticate/
Authentication: X-OTAS-SDK-KEY header

Headers

string

required

Full backend SDK key in the format otas_<prefix>_<secret>, as returned by the key-creation endpoint.

Response

integer

required

1 on success, 0 on failure.

string

required

authenticated on success.

object

Show properties

object

Show project properties

string

UUID of the project associated with the SDK key.

string

Project name.

string

Project description.

Example

curl --request POST \
  --url http://localhost:8000/api/project/v1/sdk/backend/key/authenticate/ \
  --header 'X-OTAS-SDK-KEY: otas_aBcDeFgH_vErYlOnGsEcReTvAlUeHeRe'

{
  "status": 1,
  "status_description": "authenticated",
  "response": {
    "project": {
      "id": "b2c3d4e5-f6a7-8901-bcde-f12345678901",
      "name": "My Agent App",
      "description": "Production project for the recommendation agent"
    }
  }
}

{
  "status": 0,
  "status_description": "invalid_sdk_key"
}

Error responses

`status_description`	HTTP status	Cause
`missing_sdk_key`	401	The `X-OTAS-SDK-KEY` header was absent from the request.
`invalid_sdk_key`	401	The key does not match any active, unexpired key in the database, or has been revoked.

UASAM — Users & Auth

UASAM — Projects & Keys

UASAM — Agents

Brain — Event Capture

Brain — Analytics

POST /api/project/v1/sdk/backend/key/authenticate/

Request

Headers

Response

Example

Error responses

​Request

​Headers

​Response

​Example

​Error responses

Request

Headers

Response

Example

Error responses