Health & Status

Service health and status endpoints

Health Check

get
/health

Public endpoint - No authentication required.

Check service health and availability.

Responses
chevron-right
200

Service is healthy

application/json
statusstring · enumRequired

Service health status

Possible values:
servicestringRequired

Service identifier

Example: enterprise-inference-worker
regionstringRequired

Deployment region

Example: eu-west
privacystringRequired

Privacy compliance status

Example: zero-data-retention
authenticationstringRequired

Authentication requirement

Example: enterprise-only
timestampnumber · doubleRequired

Unix timestamp

get
/health
200

Service is healthy

Service Status

get
/status

Authenticated endpoint - Provides detailed service information and client permissions.

Returns comprehensive status information including client permissions, features, and available endpoints.

Authorizations
AuthorizationstringRequired

Primary authentication method - Required for all endpoints except /health.

Three Authentication Methods:

1. OAuth 2.0 Client Credentials (Recommended)

Get token:

curl -X POST https://enterprise.bitmind.ai/v1/oauth/token \
  -d "grant_type=client_credentials" \
  -d "client_id=YOUR_ID" \
  -d "client_secret=YOUR_SECRET"

Use token:

Authorization: Bearer eyJhbGciOiJSUzI1NiJ9...
  • Token lifetime: 1 hour
  • Fast local JWT verification (<1ms)
  • Recommended for all M2M integrations

2. OAuth + mTLS (High Security)

Get token (certificate replaces secret):

curl -X POST https://enterprise.bitmind.ai/v1/oauth/token \
  -H "X-Client-Cert: $(base64 -w 0 client.crt)" \
  -d "grant_type=client_credentials" \
  -d "client_id=YOUR_ID"

Use token + certificate:

Authorization: Bearer eyJhbGc...
X-Client-Cert: LS0tLS1CRUdJTi...
  • Certificate authenticates token request (no client_secret)
  • Certificate also required on all API calls
  • Required for government/healthcare/financial clients
  • Complies with RFC 8705

3. Organization API Key (Legacy)

Authorization: Bearer enterprise-YOUR_API_KEY
  • Long-lived until revoked
  • No token refresh needed
  • Simple but less secure than OAuth
Responses
chevron-right
200

Service status and client information

application/json
statusstring · enumRequiredPossible values:
servicestringRequired
regionstringRequired
timestampnumber · doubleRequired
get
/status

Last updated