Every API should have a simple test endpoint so you can verify your authentication and perform no other action.