Skip to main content

Endpoint

Returns information about the currently authenticated access token, including whether it’s active, scopes, and expiration.

Authentication

This endpoint requires a valid OAuth access token in the Authorization header:

Response

Success Response (200 OK) - Active Token

boolean
Whether the token is currently active (not expired or revoked)
string
Space-separated list of scopes granted to this token
string
The OAuth application’s client ID
string
Will always be “Bearer”
integer
Unix timestamp when the token expires
integer
Unix timestamp when the token was issued (created)
string
Subject - the ID of the user who authorized the token

Success Response (200 OK) - Inactive Token

If the token is expired, revoked, or invalid:

Example

Use Cases

This endpoint is useful for:
  • Validating that a token is still active
  • Checking which scopes a token has access to
  • Determining when a token will expire
  • Identifying which user authorized the token
  • Token introspection for security auditing