> ## Documentation Index > Fetch the complete documentation index at: https://docs.lumeus.dev/llms.txt > Use this file to discover all available pages before exploring further. # Check Assets liveness > Returns 200 while the Assets process is serving and its database answers. No authentication. It does not say whether the indexed data is current; use `GET /readyz` for that. ## OpenAPI ````yaml /api-reference/assets.json get /healthz openapi: 3.0.3 info: title: Lumeus Assets API version: '2026-09-15' description: >- Lumeus Assets API on Stellar. Sign up at https://app.lumeus.dev: Free, Starter, Growth and Scale plans are self-serve, Enterprise by agreement. - **Pricing.** Testnet is free: Testnet requests cost no credits and are never billed. Each organization can make 10,000 Testnet requests a day across Activity, Assets and RPC (unlimited on Enterprise); the count resets at 00:00 UTC, and a request over it answers 429 rate_limited with Retry-After set to the seconds until then. Mainnet requests draw from the plan's monthly credits. Plans, limits and credit weights: `GET https://api.lumeus.dev/v1/plans`. - **Authentication.** Send `Authorization: Bearer `, the same keys as Activity and RPC. Testnet: `lum_test_…`; Mainnet: `lum_live_…`. A key works only on its own network, so pick the server that matches it (the other network answers 401). Publishable `lum_pub_…` keys work only on the routes marked "Publishable keys allowed", from an allowed browser origin. - **Headers.** Every response except `GET /readyz` carries X-Request-Id; authenticated responses carry RateLimit-Limit, RateLimit-Remaining and RateLimit-Reset; 429 and 503 carry Retry-After. - **Errors.** JSON with a machine-readable code (see [errors](/guides/errors)). A path with an empty, `.` or `..` segment answers 400 invalid_request, a trailing slash answers 404 not_found, and a method the path does not accept answers 405 with an Allow header. - **CORS.** Browser calls (CORS) are allowed from https://docs.lumeus.dev (the Try it playground of this reference) and https://app.lumeus.dev only, without cookies; responses expose ETag, Link, Location, Retry-After, X-Request-Id, X-Lumeus-Operation-Id, X-Lumeus-Idempotency and RateLimit-Limit, RateLimit-Remaining and RateLimit-Reset (errors included). Other websites cannot read responses made with a server key: use a publishable key with your own allowed origins ([browser keys](/guides/browser-keys)). license: name: Lumeus API contract servers: - url: https://assets-testnet.lumeus.dev description: Testnet (default) - url: https://assets.lumeus.dev description: Mainnet security: - Bearer: [] tags: - name: Holdings description: >- Every balance an address holds: XLM, trustlines, liquidity pool shares and contract token balances, live or at a past ledger. - name: Account state description: Claimable balances, open DEX offers and token allowances of an address. - name: Tokens description: >- The token registry (identity, metadata, flags, supply) and the ranked holders of each token. - name: Snapshots description: >- Background jobs that compute holdings or holders at any past ledger, including before the balance history begins. - name: Health description: Liveness and readiness probes for monitoring. No authentication. paths: /healthz: get: tags: - Health summary: Check Assets liveness description: >- Returns 200 while the Assets process is serving and its database answers. No authentication. It does not say whether the indexed data is current; use `GET /readyz` for that. operationId: checkAssetsLiveness responses: '200': description: The process is serving and its database answers. content: application/json: schema: type: object properties: status: type: string description: ok, or db unavailable on 503. service: type: string description: The answering service. required: - status example: service: assets status: ok headers: X-Request-Id: description: >- Identifier of this request: req_ followed by 24 hex characters. Error bodies repeat it as request_id. Quote it when contacting support. schema: type: string pattern: ^req_[0-9a-f]{24}$ '405': $ref: '#/components/responses/HTTP405_11' '503': $ref: '#/components/responses/HTTP503_5' security: [] x-codeSamples: - lang: bash label: cURL source: >- curl --fail-with-body -sS 'https://assets-testnet.lumeus.dev/healthz' - lang: javascript label: JavaScript source: >- // Node 18+ (ES module) const res = await fetch('https://assets-testnet.lumeus.dev/healthz', { method: 'GET', }); console.log(res.status, JSON.stringify(await res.json(), null, 2)); - lang: python label: Python source: |- import json import requests res = requests.get( "https://assets-testnet.lumeus.dev/healthz", timeout=30, ) print(res.status_code, json.dumps(res.json(), indent=2)) components: responses: HTTP405_11: description: >- This path does not accept the HTTP method you sent (code method_not_allowed). The Allow header lists the methods it accepts. content: application/json: schema: $ref: '#/components/schemas/Error' example: code: method_not_allowed error: 'method POST is not allowed on /healthz; allowed: GET, HEAD' request_id: req_6f1c2a9b0e4d4c7a8b3f5e21 headers: X-Request-Id: description: >- Identifier of this request: req_ followed by 24 hex characters. Error bodies repeat it as request_id. Quote it when contacting support. schema: type: string pattern: ^req_[0-9a-f]{24}$ HTTP503_5: description: The database is unavailable. content: application/json: schema: type: object properties: status: type: string description: ok, or db unavailable on 503. service: type: string description: The answering service. required: - status example: status: db unavailable service: assets headers: X-Request-Id: description: >- Identifier of this request: req_ followed by 24 hex characters. Error bodies repeat it as request_id. Quote it when contacting support. schema: type: string pattern: ^req_[0-9a-f]{24}$ schemas: Error: type: object properties: error: type: string description: Human-readable message. It may change; branch on code. code: type: string description: >- Machine-readable error code. Branch on code, not on the error text, which may change. RPC carries the same codes as the string error.data of a JSON-RPC error. invalid_request: 400: invalid input, including a malformed Idempotency-Key or an unknown or repeated query parameter (Webhooks also uses it for an oversized request body, 413). Fix the request; do not retry unchanged. unauthorized: 401: missing, revoked, invalid or wrong-network credential. payment_required: 402 (Mainnet): monthly credit quota exhausted on a hard-capped plan. forbidden: 403: the key or account policy does not allow this action. not_found: 404 (Webhooks also 410): the resource does not exist in this organization and network. topic_search_disabled: 404: contract-event topic search is not enabled on this network. method_not_allowed: 405: the route does not accept this method. conflict: 409: conflicting request identity, idempotency key, funding or recovery state. generation_changed: 409: the index generation or network changed since the snapshot was taken; restart the walk without generation and snapshot_ledger. history_unavailable: 409 (Assets): as_of_ledger is not answered from the balance history; start a snapshot job (POST /snapshots) or retry later. precondition_failed: 412 (Webhooks): the subscription version changed; fetch the current ETag. response_too_large: 413: the result exceeds the response budget; lower limit or narrow the request. precondition_required: 428 (Webhooks): If-Match with the subscription ETag is required. rate_limited: 429: a rate, concurrency or credit-cap limit was reached, or (Activity, Assets and RPC on Testnet) the daily Testnet request cap (message `daily Testnet request cap of 10000 reached; resets at 00:00 UTC`, Retry-After until 00:00 UTC). Wait Retry-After seconds (a refused request consumes nothing). A Retry-After greater than 60 means the daily Testnet cap: wait until 00:00 UTC or switch to Mainnet. RPC carries it as the string error.data. internal_error: 500 or another unexpected 5xx; quote request_id when contacting support. not_implemented: 501: the feature is not enabled on this host. busy: 503: reads are saturated (the queue wait expired or the database refused another query or ran short of memory). Retry the same request after Retry-After (2) seconds. query_timeout: 503: the read ran out of time. Do not retry unchanged right away: narrow the ledger range (since_ledger/until_ledger) or lower limit; Retry-After is 30. index_not_ready: 503: the index or snapshot is not ready yet or is rebuilding; retry after Retry-After seconds. topic_coverage: 503: the effective range is outside the contract-event topic index coverage (the message states it); pass a range inside it or retry after Retry-After (60) seconds. unavailable: 503: another temporary failure (billing, rate limiter, queue); retry after Retry-After seconds. enum: - invalid_request - unauthorized - payment_required - forbidden - not_found - topic_search_disabled - method_not_allowed - conflict - generation_changed - history_unavailable - precondition_failed - response_too_large - precondition_required - rate_limited - internal_error - not_implemented - busy - query_timeout - index_not_ready - topic_coverage - unavailable request_id: type: string description: >- Identifier of this request, the same value as the X-Request-Id header. Quote it when contacting support. required: - error securitySchemes: Bearer: type: http scheme: bearer description: >- Send `Authorization: Bearer `, the same keys as Activity and RPC. Testnet: `lum_test_…`; Mainnet: `lum_live_…`. A key works only on its own network, so pick the server that matches it (the other network answers 401). Publishable `lum_pub_…` keys work only on the routes marked "Publishable keys allowed", from an allowed browser origin. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.