GET /me is the cheapest, side-effect-free endpoint for checking authentication. A 200 means the key is valid, active, and points at the expected org.
awo_live_…), auth.type is "oauth_token" and the response instead carries the granting client, the authorized scopes, and the acting user:

