Health

Health

curl --request GET \
  --url https://api.tattooapi.com/api/v1/health

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.tattooapi.com/api/v1/health",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.tattooapi.com/api/v1/health"

	req, _ := http.NewRequest("GET", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.tattooapi.com/api/v1/health")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body

GET

api

health

Health

curl --request GET \
  --url https://api.tattooapi.com/api/v1/health

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.tattooapi.com/api/v1/health",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.tattooapi.com/api/v1/health"

	req, _ := http.NewRequest("GET", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.tattooapi.com/api/v1/health")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body

Posture: Public no-auth read. This endpoint is part of the current promoted public surface.

Canonical request URL: https://api.tattooapi.com/api/v1/health. GET /health/live, GET /health/ready, and legacy GET /health are public and return direct objects, not success wrappers. Production operators should distinguish three health layers:

GET /api/v1/health/live is the liveness check. It returns 200 when the API process is running.
GET /api/v1/health/ready is the production readiness check. It reports configured and missing dependency groups for hosting, media staging, communications intake, identity evidence, private workers, approved portfolio storage, runtime mapping, partner auth, and observability. It does not expose secret values.
GET /api/v1/health is the deeper legacy/runtime compatibility report while Wave D cutover still contains older routes. It can report 503 while /live and /ready are still green.

Use /api/v1/health/ready before treating api.tattooapi.com as production-ready for intake, private worker, or approved portfolio flows. The legacy compatibility endpoint includes a runtime block derived from the internal data SDK. That block is useful for diagnosing fallback posture, but production release decisions should use /live and /ready.

Response Shape

{
  "status": "healthy",
  "timestamp": "2026-04-20T12:00:00.000Z",
  "version": "v1",
  "uptime": 1234.56,
  "environment": "development",
  "services": {
    "database": {
      "status": "healthy",
      "responseTime": 12
    },
    "api": {
      "status": "healthy",
      "version": "v1"
    },
    "configuration": {
      "legacyDataUrl": true,
      "anonKey": true,
      "serviceKey": false,
      "ready": false
    }
  },
  "runtime": {
    "targetBackend": "tattooapi_runtime",
    "currentPersistence": "mixed_runtime_and_legacy",
    "apiCutoverStage": "d3_internal_runtime_authoritative",
    "publicReadSurface": "internal_runtime_proof_only",
    "notes": [
      "TattooAPI runtime is currently authoritative for internal runtime proof."
    ]
  }
}

Notes

200 means healthy or degraded-but-operational.
503 means unhealthy.
The endpoint also returns system info, endpoint URLs, and feature flags for the local runtime.
services.configuration still reports legacy environment readiness during the Wave D cutover.
runtime.currentPersistence is the field to use when checking TattooAPI runtime authority.

Production Readiness Shape

GET /api/v1/health/ready returns safety posture and flow status without secret values: Ready response:

{
  "status": "ready",
  "service": "tattoo-api",
  "publicApiBaseUrl": "https://api.tattooapi.com",
  "dependencies": [
    {
      "id": "private_worker",
      "status": "ready",
      "configuredEnv": ["PRIVATE_WORKER_MODE", "TATTOO_API_BASE_URL", "TATTOO_PARTNER_API_KEY"],
      "missingEnv": []
    }
  ],
  "flows": [
    {
      "id": "private_worker_context",
      "status": "ready",
      "blockedBy": []
    }
  ],
  "safetyPosture": {
    "publicWritesAllowed": false,
    "directPortfolioStorageWritesFromWorkersAllowed": false,
    "directRuntimeMutationsFromWorkersAllowed": false,
    "publicSurfaceActivationAllowedFromWorkers": false,
    "highLevelCanPublishDirectly": false,
    "r2BucketPublicAccessAllowed": false
  }
}

Blocked response:

{
  "status": "blocked",
  "service": "tattoo-api",
  "publicApiBaseUrl": "https://api.tattooapi.com",
  "dependencies": [
    {
      "id": "portfolio_intake_staging",
      "status": "ready",
      "configuredEnv": ["PORTFOLIO_INTAKE_STORAGE_BUCKET"],
      "missingEnv": []
    }
  ],
  "flows": [
    {
      "id": "approved_portfolio_write",
      "status": "blocked",
      "blockedBy": ["approved_portfolio_storage", "identity_evidence_lookup", "partner_auth"]
    }
  ],
  "safetyPosture": {
    "publicWritesAllowed": false,
    "directPortfolioStorageWritesFromWorkersAllowed": false,
    "directRuntimeMutationsFromWorkersAllowed": false,
    "publicSurfaceActivationAllowedFromWorkers": false,
    "highLevelCanPublishDirectly": false,
    "r2BucketPublicAccessAllowed": false
  }
}

Overview

Discovery

Creative

Portfolio Intake

Response Shape

Notes

Production Readiness Shape

​Response Shape

​Notes

​Production Readiness Shape

Response Shape

Notes

Production Readiness Shape