---
title: "Introspect token"
method: POST
path: "/oauth/introspect"
tags: ["OAuth"]
---

# Introspect token

`POST /oauth/introspect`

Returns metadata about an access token, including whether it is active.

## Request body

- object
  - `client_id` string — The client identifier.
  - `client_secret` string — The client secret.
  - `token` string, required — The token to introspect.

## Response `200`

Token introspection result.

- OauthIntrospect — Token introspection response. When active is false, only that field is returned.
  - `active` boolean, required — Whether the token is active.
  - `client_id` string — The client identifier for the OAuth 2.0 client that requested this token.
  - `exp` integer — The Unix timestamp when the token expires.
  - `iat` integer — The Unix timestamp when the token was issued.
  - `iss` string — The issuer of the token.
  - `scope` string — A space-separated list of scopes associated with the token.
  - `sub` string — The subject of the token (user ID).
  - `username` string — The username of the resource owner.

## Other responses

- `400` — OAuth error response
- `401` — OAuth error response

---

[API](https://skmtc.dev/coinlist/apis/frontline-api.md) · [All operations](https://skmtc.dev/coinlist/apis/frontline-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/coinlist/frontline-api/revisions/fa411ea1bdfb/schema)