External Authorization

Inspect the scopes, clone resources, expiry, and revocation state of a grant token.

Returns only authorization metadata. It never returns an owner password, session token, external identifier, memory, or conversation content.

post/v1/inspect_external_authorization

Request

preferred_languagestring nullable

BCP-47-ish language code (e.g. 'en', 'zh-cn') for localized messages.

access_tokenstring required

Opaque grant token accepted only by grant inspection and external clone invocation; store it as a secret and never expose it to users.

{
  "access_token": "grant-token-from-exchange-response"
}

Result envelope — check the success field.

successboolean required

Whether the call succeeded.

error_messagestring nullable required

Human-readable reason when success is false.

error_codestring

grant_idstring nullable required

Stable grant identifier used by the owner-facing revocation surface.

status'active' | 'revoked' | 'expired' nullable required

Current authorization or invocation lifecycle state.

scopesstring[] nullable required

Capabilities approved by the owner.

clone_idsstring[] nullable required

AI consciousness resources selected by the owner.

created_atinteger nullable required

access_token_expires_atinteger nullable required

UNIX timestamp after which the short-lived access token must be refreshed.

expires_atinteger nullable required

UNIX timestamp when this resource or capability expires.

revoked_atinteger nullable required

UNIX timestamp when the owner revoked the grant, or null.

No recorded changes to this operation across all 2 revisions of this API.