---
title: "Introspect"
method: POST
path: "/oauth/introspect"
tags: ["OAuth"]
---

# Introspect

`POST /oauth/introspect`

## Request

- Base URL: `https://api.emile.wine` (the document declares no server; this is the origin it was published from)
- URL: `https://api.emile.wine/oauth/introspect`
- Auth: none declared

Resolves an access token to its claims for the MCP remote
server. Protected by a shared secret (env `OAUTH_INTROSPECT_SECRET`)
rather than client_credentials because the introspector is our own
internal service, not an OAuth client.

## Headers

- `X-Introspect-Secret` string, nullable

## Response `200`

Successful Response

- IntrospectionResponse
  - `active` boolean, required
  - `user_id` string, nullable
  - `client_id` string, nullable
  - `scope` string, nullable
  - `exp` integer, nullable: Unix epoch seconds

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/emile/apis/emile-api.md) · [All operations](https://skmtc.dev/emile/apis/emile-api/llms.txt) · [OpenAPI document](https://skmtc.dev/emile/apis/emile-api/revisions/eb2d1d1db972?raw)