Skip to main content
POST
Token Introspection
Allows resource servers to verify tokens without decoding JWT secrets.
string
required
The access or refresh token to inspect.
string
Hint: access_token or refresh_token.
boolean
Whether the token is valid and not expired.
string
Subject (user UUID).
string
Client that requested the token.
string
Granted scopes.
number
Expiry timestamp (Unix).
string
Organisation UUID.