> ## Documentation Index
> Fetch the complete documentation index at: https://docs.scute.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Verify the active M2M session

> Validate the caller's JWT belongs to an active machine-to-machine session



## OpenAPI

````yaml /swagger.json get /v1/apps/{app_id}/m2m/verify
openapi: 3.0.1
info:
  title: Scute API
  version: v1
  description: API for managing users in Scute applications
servers:
  - url: https://{defaultHost}
    variables:
      defaultHost:
        default: api.scute.io
  - url: http://localhost:3333
    description: Development server
security:
  - apiSecret: []
    userAccess: []
paths:
  /v1/apps/{app_id}/m2m/verify:
    parameters:
      - name: app_id
        in: path
        required: true
        description: App ID
        schema:
          type: string
    get:
      tags:
        - M2M Sessions
      summary: Verify the active M2M session
      description: >-
        Validate the caller's JWT belongs to an active machine-to-machine
        session
      operationId: verifyM2mSession
      parameters:
        - name: Authorization
          in: header
          required: true
          description: M2M access token
          schema:
            type: string
      responses:
        '200':
          description: successful
          content:
            application/json:
              schema:
                type: object
                properties:
                  message:
                    type: string
                    example: verified
                  verified:
                    type: boolean
                    example: true
                  client_name:
                    type: string
                    nullable: true
                    description: Client label associated with the token session
                  session_id:
                    type: string
                    description: Identifier of the active M2M token session
                required:
                  - message
                  - verified
                  - session_id
        '401':
          description: unauthorized - missing or invalid M2M session
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: M2M session required
                  error_code:
                    type: string
                    example: m2m_session_required
                    nullable: true
                required:
                  - error
components:
  securitySchemes:
    apiSecret:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: API Secret token
    userAccess:
      type: apiKey
      name: X-Authorization
      in: header
      description: User Access token

````