Introspect token

Introspect an OAuth 2.0 token to determine its active status and retrieve its associated metadata.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…

Introspects an OAuth 2.0 token and returns its current status and metadata. Implements RFC 7662. Accepts both JWT access tokens and opaque refresh tokens.

Requires HTTP Basic Auth. The client_id and client_secret must belong to the same client application that originally issued the token.

Always returns HTTP 200 OK. An invalid, expired, revoked, or otherwise unusable token returns { "active": false } with no additional fields — errors are never surfaced to the caller.

Form Data
string
required

The token to introspect. Accepts JWT access tokens and opaque refresh tokens.

string
enum
Defaults to access_token

A hint about the type of token being submitted. When provided, the server tries the indicated type first before falling back to the other. Per RFC 7662 §2.1, this is advisory only — both token types are always attempted.

Allowed:
Response

Language
Credentials
Basic
base64
:
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json