---
title: "OAuth2 Token Introspection (RFC 7662)"
method: POST
path: "/oauth2/introspect"
tags: ["session"]
---

# OAuth2 Token Introspection (RFC 7662)

`POST /oauth2/introspect`

Introspect a token to determine its current state and metadata.

## Response `200`

Token introspection response

- OAuth2IntrospectResponse
  - `active` boolean, required
  - `scope` string
  - `client_id` string
  - `sub` string
  - `exp` integer
  - `iat` integer
  - `iss` string
  - `token_type` string

## Other responses

- `default` — OAuth2 error response

## Changes

- **2026-02-19** `50e643cc3991` — 1 info
  - endpoint added
- **2025-10-09** `2bb5c4e40463` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/nhost/apis/nhost-authentication-api/changes/oauth2/introspect/post.md)

---

[API](https://skmtc.dev/nhost/apis/nhost-authentication-api.md) · [All operations](https://skmtc.dev/nhost/apis/nhost-authentication-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/nhost/nhost-authentication-api/revisions/a5c0d88b55c4/schema)