GET /health is the only operation that does not require X-API-Key.
What it proves
- the public host can be resolved and reached
- TLS negotiation can complete
- the API can return its current health representation
What it does not prove
- API-key validity
- tenant or division scope
- access to a protected resource
- write validation
- downstream file availability
Get public API health
Review the exact response and error contract.