Skip to main content
GET
Get key management session

Authorizations

Authorization
string
header
required

Opaque vlm_ token valid for 30 minutes. API-key management only; ledger and MCP routes reject it. The UI stores it in a separate host-only HttpOnly cookie.

Response

Validate a key-management session and read its effective expiry. Requires a vlm_ Bearer token.

expires_at
string<date-time>
required
Pattern: ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:Z))$