cURL
Shared Endpoints
Test OAuth
Verify that an OAuth JWT token is valid and working
GET
cURL
Use this endpoint to verify that your OAuth JWT token is properly configured and working.
The v2 response also carries
orgCategory, telling you which kind of organization the credential you just sent belongs to: upstreamEntity for a carrier, MGA or wholesaler, downstreamEntity for an agency. It is a four-value enum: enterpriseUpstreamEntity and enterpriseDownstreamEntity also exist, for surfaces that are not routable yet. Match the value you expect rather than treating anything that is not upstreamEntity as an agency. Which API is mine? has the full mapping.
That is the fastest way to resolve the most common integration confusion. If a request returns 403 with invalid_organization_category, call this endpoint with the same token: it will tell you which surface that credential is actually for. A carrier credential reaches /v2/upstream/*; an agency credential reaches /v2/downstream/*. See Authentication for the full surface rules.
This is a test endpoint intended for debugging authentication issues. It returns no business data beyond the category of your own organization.