Endpoint
Authentication
This endpoint requires a valid OAuth access token in the Authorization header:Response
Success Response (200 OK) - Active Token
boolean
Whether the token is currently active (not expired or revoked)
string
Space-separated list of scopes granted to this token
string
The OAuth application’s client ID
string
Will always be “Bearer”
integer
Unix timestamp when the token expires
integer
Unix timestamp when the token was issued (created)
string
Subject - the ID of the user who authorized the token
Success Response (200 OK) - Inactive Token
If the token is expired, revoked, or invalid:Example
Use Cases
This endpoint is useful for:- Validating that a token is still active
- Checking which scopes a token has access to
- Determining when a token will expire
- Identifying which user authorized the token
- Token introspection for security auditing

