Check a saved provider account

curl --request POST \
  --url https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/accounts/{accountKey}/check \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/accounts/{accountKey}/check"

headers = {"Authorization": "Bearer <token>"}

response = requests.post(url, headers=headers)

print(response.text)

const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/accounts/{accountKey}/check', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/accounts/{accountKey}/check",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/accounts/{accountKey}/check"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/accounts/{accountKey}/check")
  .header("Authorization", "Bearer <token>")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/accounts/{accountKey}/check")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "connected": true,
  "authentication": {
    "status": "accepted",
    "scope": "saved_credential",
    "reason": "not_connected"
  },
  "capacity": {
    "status": "available",
    "scope": "paid_key_budget",
    "reason": "not_connected"
  },
  "inference": "not_tested",
  "observed_at": "2023-11-07T05:31:56Z"
}

{
  "error": "prompt_required"
}

{
  "error": "missing_bearer",
  "message": "Authorization required"
}

{
  "error": "missing_scope",
  "required_scope": "sessions:read"
}

{
  "error": {
    "type": "rate_limited",
    "message": "This API key exceeded its request-rate limit"
  }
}

Provider credentials

Check a saved provider account

Requires org:write. Members may check accounts they connected; owners and admins any account. Accepts ordinary API keys as well as user OAuth grants. Checks the exact saved account using provider metadata only, without paid inference calls. Reports saved connection presence, authentication evidence, and capacity separately. Accepted metadata authentication or available capacity does not establish model access or inference success. Missing accounts return connected=false; unavailable storage returns connected=null. Does not persist a health verdict.

_{Scope: org:write}

POST

organizations

{orgId}

provider-credentials

{providerId}

accounts

{accountKey}

check

Check a saved provider account

curl --request POST \
  --url https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/accounts/{accountKey}/check \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/accounts/{accountKey}/check"

headers = {"Authorization": "Bearer <token>"}

response = requests.post(url, headers=headers)

print(response.text)

const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/accounts/{accountKey}/check', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/accounts/{accountKey}/check",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/accounts/{accountKey}/check"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/accounts/{accountKey}/check")
  .header("Authorization", "Bearer <token>")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.reasonmachines.com/v3/organizations/{orgId}/provider-credentials/{providerId}/accounts/{accountKey}/check")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "connected": true,
  "authentication": {
    "status": "accepted",
    "scope": "saved_credential",
    "reason": "not_connected"
  },
  "capacity": {
    "status": "available",
    "scope": "paid_key_budget",
    "reason": "not_connected"
  },
  "inference": "not_tested",
  "observed_at": "2023-11-07T05:31:56Z"
}

{
  "error": "prompt_required"
}

{
  "error": "missing_bearer",
  "message": "Authorization required"
}

{
  "error": "missing_scope",
  "required_scope": "sessions:read"
}

{
  "error": {
    "type": "rate_limited",
    "message": "This API key exceeded its request-rate limit"
  }
}

Authorizations

Authorization

string

header

required

Your Reason API key from Settings › API keys. New keys use reason_; legacy ara_ keys remain accepted. Keys are capability-scoped: run, mcp:read, mcp:write, secrets:read, secrets:write, sessions:read, sessions:debug, knowledge:read, memory:read, memory:write, skills:read, skills:write, repos:read, repos:write, reviews:read, reviews:write, deployment:read, analytics:read, org:read, org:write, attachments:read, attachments:write, guardrails:read, guardrails:write, network:read, network:write, automations:read, automations:write, agent_auth:read. network:read and network:write are opt-in, excluded from default keys. network:read reads the saved workspace network policy; network:write replaces custom allowed hosts and requires a current organization owner/admin. Legacy project PATCH requests containing network_allowed_hosts also require network:write plus their existing run scope and project management permission; saved project hosts do not affect current session egress. Only owners/admins can mint or manage keys with network:write; keys cannot grant themselves more authority. See /docs/network-policies for replacement semantics and runtime applicability. mcp:write manages MCP server configuration only; it does not authorize remote MCP-tool execution. sessions:read reads sessions, including the assistant, reasoning and tool activity in their events. sessions:debug is privileged: only for organization owners/admins, it expands session events to the full diagnostic projection (diagnostic event kinds, status text and raw event metadata).

Path Parameters

orgId

string

required

Organization id or slug. Resolve it with GET /v3/self.

providerId

string

required

The provider identifier (e.g. openai, anthropic, google, deepseek), returned as provider_id by listProviderCatalog.

accountKey

string

required

The saved provider account to read: the account_key its provider sign-in recorded.

Required string length: 1 - 512

Response

Point-in-time metadata evidence; inference is not tested.

connected

boolean | null

required

Saved credential presence, not validity. Null means storage could not be inspected.

authentication

object

required

Whether the saved credential authenticates with the provider.

Show child attributes

capacity

object

required

Whether the account has capacity left.

Show child attributes

inference

string

required

No model execution occurred. Metadata checks do not establish inference access.

Allowed value: "not_tested"

observed_at

string<date-time>

required

When the check ran.

API guides

Endpoints

Check a saved provider account

Authorizations

Path Parameters

Response