ProsperaTech Group
08/05/2026, 4:13 PMCharlesq
08/11/2026, 7:05 PMNikhil Chowdhury
08/12/2026, 5:28 AMvalidate_credentials: true has no effect (despite the typings saying it validates API_KEY), and there's no other endpoint that checks a static key against the vendor. It only fails later at tools.execute with a real 401.
Confirmed live on the dashboard: connected Resend with a wrong key → ACTIVE, and it only 401'd when I actually sent an email.
We also measured the obvious client-side workaround (probe with a safe, arg-free read and look for a 401) across all 936 static toolkits — only 444 (47%) return a clean 401. The rest are indistinguishable from a working key on a safe call:
- 401 → bad key (usable) — 444
- 404 routes before auth — 114
- 403 ACL, could be a valid under-scoped key — 89
- 200 public endpoint, any key "works" — 70
- 400 the get needs an argument — 50
- 401 on an OAuth-capable toolkit, may 401 a valid static key — 45
- unreachable SSRF-blocked / bad base_url — 86
- 5xx / other — 38
Three questions:
1. Is there any first-party way to verify a static credential at connect that I've missed?
2. Any plan to honour validate_credentials for API_KEY (or fix the typings)?
3. Side note: get_current_user_endpoint is a public URL for some toolkits (jira→serverInfo, serpapi→locations.json), so it 200s any key — worth a look.
Full repro + raw API example in the issue.Pontus
08/12/2026, 12:06 PMRage
08/16/2026, 11:37 AMarun
08/20/2026, 6:46 PMAqib
08/24/2026, 5:49 AMBhukya Yedukondalu Naik
08/24/2026, 10:53 AM6a6ygreg
08/24/2026, 1:41 PMAbhishekShar
08/26/2026, 4:00 PMfiretruck
08/27/2026, 2:19 PMGreeked
08/27/2026, 2:24 PMejvali
08/28/2026, 4:33 PMARNIM X3
09/02/2026, 6:15 AMmbilski
09/02/2026, 9:14 AMVakhniy_2004
09/03/2026, 1:02 AMBerezhnyVanda.1987
09/03/2026, 6:55 PMejvali
09/03/2026, 10:00 PMGlorylad
09/04/2026, 12:42 AMBrianSalHal
09/09/2026, 7:53 PMulyana_kirichenko_2004
09/09/2026, 8:46 PMDavid Meir-Levy
09/10/2026, 6:01 AMIHOR
09/11/2026, 12:11 PMwontlose
09/15/2026, 8:41 AMrstar
09/20/2026, 5:25 PMekrsellsrs
09/21/2026, 12:21 AMrstar
09/22/2026, 3:21 AMBrianne
09/22/2026, 1:28 PMsopwith
09/25/2026, 4:45 AMHertelerfeller
09/30/2026, 11:45 PM