User lookup
Each tool call includes X-BA-User-Id. This endpoint tells you if that id is a real user.
GET /api/users/:id
Send your provider secret as Authorization: Bearer <secret>.
-sky-300">curl -X -sky-300">GET "$API/api/users/USER_ID" \
-H "Authorization: Bearer $SECRET"A known id returns JSON like this. An unknown id returns { "valid": false }. The response does not include a name or email.
{
"valid": true,
"id": "USER_ID"
}