Checks whether an AI provider key is valid by making one authenticated request to that provider’s model list. Providers block browser requests, so the call goes through this site’s endpoint, which uses a fixed URL per provider, sends no request body and stores nothing — no database, no log, no cache. The key still passes through the server, so treat any key you paste into a tool you do not control as exposed and rotate it if it protects something valuable.
Used for one request and never stored. Prefer a key you can revoke.