Skip to main content
GET
cURL
Use this endpoint to verify that your OAuth JWT token is properly configured and working. The v2 response also carries orgCategory, telling you which kind of organization the credential you just sent belongs to: upstreamEntity for a carrier, MGA or wholesaler, downstreamEntity for an agency. It is a four-value enum: enterpriseUpstreamEntity and enterpriseDownstreamEntity also exist, for surfaces that are not routable yet. Match the value you expect rather than treating anything that is not upstreamEntity as an agency. Which API is mine? has the full mapping. That is the fastest way to resolve the most common integration confusion. If a request returns 403 with invalid_organization_category, call this endpoint with the same token: it will tell you which surface that credential is actually for. A carrier credential reaches /v2/upstream/*; an agency credential reaches /v2/downstream/*. See Authentication for the full surface rules.
This is a test endpoint intended for debugging authentication issues. It returns no business data beyond the category of your own organization.

Response

OAuth token is valid

data
object
required
requestId
string
required

Unique request identifier

Example:

"dev-2c5e7cf2-9acf-4c8c-ab2f-b81f39d775a8"

timestamp
string
required

Response timestamp

Example:

"2025-11-12T20:49:03.293Z"