Probe the live provider with a caller-supplied key — never stored — to verify kind/baseUrl speak the claimed contract (admin)

Authenticate every request with Authorization: Bearer <token> — a JWT or API token.

Download OpenAPI JSON