# Integration health for this Site

`GET /api/v1/integration-status` · operationId `getIntegrationStatus`

For developers: your server sends this request with a server key; it is not a button in the dashboard. To see the same information without code, open **Connect your channels** in the dashboard.

Server key last use, verify outcomes by code over seven days (allow, review and deny from the decision history; failure codes such as unauthorized, session_reinit_required or rate_limited), webhook delivery status with a fixed reason category, live browser sessions, database health and warnings such as policy_missing. Holds no identities or request values.

## Authentication

Send `Authorization: Bearer YOUR_SERVER_KEY` (siteServerKey: Site server key in Authorization: Bearer <key> (the scheme is case-insensitive and required; a bare key is 401). Shown once on creation or rotation. Publishable keys cannot authenticate). Keep the server key in server-only configuration; never send it to a browser.

## Responses

- **200**: Integration status · body `object`
- **400**: bad_request: the request is invalid; message says what to fix and field names the request field · body `Error`
- **401**: unauthorized (missing or invalid server key, missing Bearer scheme) · body `Error`
- **403**: forbidden: the call came from a browser page or another Site; call from your server with this Site’s server key · body `Error`
- **404**: not_found: nothing with this ID on this Site (or it is past retention), or an unknown path · body `Error`
- **429**: rate_limited: wait for Retry-After · body `Error` · headers `Retry-After`
- **500**: internal_error: fail the protected action; do not retry automatically · body `Error`
- **503**: service_unavailable: temporarily unavailable; only verify retries · body `Error`

### Success body fields

- `siteId` (string, required)
- `generatedAt` (integer, required)
- `windowDays` (integer, required)
- `behaviourCallsAgent` (boolean, required): The Site setting "Behaviour signals can call Agent" (default true). True: behaviour clues of two or more different kinds agreeing in one page, with no physical-device input, make the session AI agent (high confidence). False: the same combination only keeps the session from reading Human (Unknown at most). Changed by a workspace owner or admin in Control › Rules; read-only here.
- `database` ("ok" | "unavailable", required)
- `keys` (object[], required)
- `keys[].id` (string, required)
- `keys[].status` ("current" | "retiring", required)
- `keys[].expires` (integer | null, required)
- `keys[].lastUsedAt` (integer | null, required)
- `verify` (object, required)
- `verify.total` (integer, required)
- `verify.byCode` (object, required)
- `verify.lastDecisionAt` (integer | null, required)
- `verify.unsavedPolicyActions` (object[], required)
- `verify.unsavedPolicyActions[].actionId` (string, required)
- `verify.unsavedPolicyActions[].count` (integer, required)
- `verify.unsavedPolicyActions[].lastAt` (integer | null, required)
- `webhooks` (object[], required)
- `sdk` (object, required)
- `sdk.liveSessions` (integer | null, required)
- `sdk.sessionCap` (integer | null, required)
- `sdk.lastEvidenceAt` (integer | null, required)
- `warnings` (object[], required)
- `warnings[].code` (string, required)
- `warnings[].message` (string, required)

Failures are not verdicts. Error bodies follow the `Error` schema: `code` is one of `bad_request`, `unauthorized`, `session_reinit_required`, `forbidden`, `not_found`, `conflict`, `identity_required`, `payload_too_large`, `rate_limited`, `internal_error`, `service_unavailable`, `request_failed`, `approval_invalid`, `approval_used`, `approval_expired`, `approval_mismatch`, `step_up_not_held`, `step_up_mismatch`, `step_up_settled`, `step_up_expired`, `step_up_superseded`, `agent_tokens_disabled`, `tool_not_approved`, `tool_not_read_only`. [Errors and retries](/docs/errors) explains each code and what to do.

## Example

```sh tab=curl
curl -sS -X GET 'https://app.trytelltale.dev/api/v1/integration-status' \
  -H "Authorization: Bearer $TELLTALE_SERVER_KEY"
```

```js tab=fetch
const response = await fetch("https://app.trytelltale.dev/api/v1/integration-status", {
  method: "GET",
  headers: {
    Authorization: 'Bearer ' + process.env.TELLTALE_SERVER_KEY
  },
  signal: AbortSignal.timeout(5000)
});
const result = await response.json();
```

Machine-readable contract: [openapi.json](https://app.trytelltale.dev/openapi.json). Request builder: the [API explorer](/docs/api-explorer) shows every operation as curl; it sends requests only on a local dashboard.