---
title: "Introspect"
method: POST
path: "/oauth/introspect"
tags: ["oauth"]
---

# Introspect

`POST /oauth/introspect`

## Request

- Base URL: `https://api.bitpoort.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.bitpoort.com/oauth/introspect`
- Auth: none required

RFC 7662 token introspection. Always returns 200 to avoid
leaking info about which tokens exist; a caller that's
unauthorised gets {"active": false}.

The ``token_type_hint`` is advisory -- we look up access tokens
first by default, refresh tokens if the access lookup misses or
if the hint says ``refresh_token``.

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/bitpoort/apis/bitpoort-api.md) · [All operations](https://skmtc.dev/bitpoort/apis/bitpoort-api/llms.txt) · [OpenAPI document](https://skmtc.dev/bitpoort/apis/bitpoort-api/revisions/1a51d8566777?raw)