---
title: "Changes to Token introspection endpoint"
method: POST
path: "/oauth/2026-03/token/introspect"
---

# Changes to Token introspection endpoint

`POST /oauth/2026-03/token/introspect`

> Every recorded change to this operation, newest first.
> 14 revisions in range; 1 not diffed, 2 could not be searched.

## Timeline

Changed in 4 of 14 revisions.

- **2026-05-27** `f9c7181056c5`: 2 breaking, 27 info
- **2026-04-08** `b0d8bc008db9`: 1 info
- **2026-03-31** `f33be5a82610`: 3 breaking
- **2026-03-25** `62586336cea2`: 1 info

## Changes

- **2026-05-27** `f9c7181056c5`: 2 breaking, 27 info
  - the `oneOf[#/components/schemas/AuthOauthPublicAccessTokenInfoResponse]/` response's property type changed from no type to `object` for status `200`
  - the `oneOf[#/components/schemas/AuthOauthPublicRefreshTokenInfoResponse]/` response's property type changed from no type to `object` for status `200`
  - added the optional property `oneOf[#/components/schemas/AuthOauthPublicAccessTokenInfoResponse]/hub_domain` to the response with the `200` status
  - added the optional property `oneOf[#/components/schemas/AuthOauthPublicAccessTokenInfoResponse]/user` to the response with the `200` status
  - added the optional property `oneOf[#/components/schemas/AuthOauthPublicRefreshTokenInfoResponse]/hub_domain` to the response with the `200` status
  - added the optional property `oneOf[#/components/schemas/AuthOauthPublicRefreshTokenInfoResponse]/user` to the response with the `200` status
  - removed `subschema #1` from the `oneOf[#/components/schemas/AuthOauthPublicAccessTokenInfoResponse]/` response property `allOf` list for the response status `200`
  - removed `subschema #1` from the `oneOf[#/components/schemas/AuthOauthPublicRefreshTokenInfoResponse]/` response property `allOf` list for the response status `200`
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicAccessTokenInfoResponse]/active` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicAccessTokenInfoResponse]/app_id` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicAccessTokenInfoResponse]/client_id` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicAccessTokenInfoResponse]/expires_in` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicAccessTokenInfoResponse]/hub_id` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicAccessTokenInfoResponse]/is_private_distribution` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicAccessTokenInfoResponse]/scopes` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicAccessTokenInfoResponse]/signed_access_token` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicAccessTokenInfoResponse]/token` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicAccessTokenInfoResponse]/token_type` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicAccessTokenInfoResponse]/token_use` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicAccessTokenInfoResponse]/user_id` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicRefreshTokenInfoResponse]/active` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicRefreshTokenInfoResponse]/app_id` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicRefreshTokenInfoResponse]/client_id` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicRefreshTokenInfoResponse]/hub_id` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicRefreshTokenInfoResponse]/scopes` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicRefreshTokenInfoResponse]/token` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicRefreshTokenInfoResponse]/token_type` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicRefreshTokenInfoResponse]/token_use` to the response with the `200` status
  - added the required property `oneOf[#/components/schemas/AuthOauthPublicRefreshTokenInfoResponse]/user_id` to the response with the `200` status
- **2026-04-08** `b0d8bc008db9`: 1 info
  - api operation id `post-/oauth/2026-03/token/introspect_/oauth/v3/token/introspect` removed and replaced with `post-/oauth/2026-03/token/introspect`
- **2026-03-31** `f33be5a82610`: 3 breaking
  - added `#/components/schemas/AuthOauthPublicAccessTokenInfoResponse, #/components/schemas/AuthOauthPublicRefreshTokenInfoResponse` to the response body `oneOf` list for the response status `200`
  - the response's body type changed from `object` to no type for status `200`
  - removed the required property `active` from the response with the `200` status
- **2026-03-25** `62586336cea2`: 1 info
  - endpoint added

---

[Operation](https://skmtc.dev/hubspot/apis/hubspot-api-specification/docs/oauth/2026-03/token/introspect/post.md) - [API](https://skmtc.dev/hubspot/apis/hubspot-api-specification.md) - [Page](https://skmtc.dev/hubspot/apis/hubspot-api-specification/changes/oauth/2026-03/token/introspect/post)