---
title: "Introspect an access or refresh token (RFC 7662)"
method: POST
path: "/oauth/introspect"
tags: ["OAuth"]
---

# Introspect an access or refresh token (RFC 7662)

`POST /oauth/introspect`

Returns `{ active: false }` for unknown / expired / revoked tokens. For active tokens, returns claims appropriate to the token kind (PAT vs OAuth).

## Request body

- object
  - `token` string, required
  - `token_type_hint` 'access_token' | 'refresh_token'

## Response `200`

Default Response

- union
  - object
    - `active` false, required
  - object
    - `active` true, required
    - `tokenType` 'pat', required
    - `user_id` string, required
    - `team_id` string, required
    - `scope` string
    - `token_type` 'Bearer', required
    - `exp` number, required
    - `iat` number, required
    - `sub` string, required
    - `pat_id` string, required
    - `pat_prefix` string, required
  - object
    - `active` true, required
    - `tokenType` 'oauth', required
    - `user_id` string, required
    - `team_id` string, required
    - `client_id` string, required
    - `scope` string
    - `token_type` union, required
      - 'Bearer'
      - 'refresh_token'
    - `exp` number, required
    - `iat` number, required
    - `sub` string, required
    - `aud` string, required

---

[API](https://skmtc.dev/jam/apis/jam-public-api.md) · [All operations](https://skmtc.dev/jam/apis/jam-public-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/jam/jam-public-api/revisions/b628e9368a59/schema)