Check the origin secret

GET /v1/origin-secret

Tells you whether proxied requests carry x-domainee-origin-secret. The secret itself is never returned here; it's shown only when you turn it on or rotate it.

Request

curl https://api.domainee.dev/v1/origin-secret \
  -H "Authorization: Bearer $DOMAINEE_API_KEY"

Response: 200 OK

{
  "enabled": true
}

If you've lost the secret, rotate it.