Inspect an OAuth token for your resource
Changed onCore authentication selects the resource owner. The resource must be an exact canonical HTTPS URI under a verified domain of that account. Checks the signed access token, resource audience, mcp scope, client, SVID, live session version, expiry and connected-site block. Invalid tokens return active:false; dependency failures return an error, never an inactive verdict. Credential responses are not cached.
Request
- Base URLhttps://api.sparkvault.com/v1
- Auth
- API key in header X-API-Key
- or HTTP bearer
- TypeScriptA function with typed inputs. Its response is checked against the schema.
Request body
Response
The token verdict.
Changes
- info
the response property
/became required for the status - info
the response property
/became required for the status - info
the response property
/became required for the status - info
the response property
/became required for the status - info
the response property
became required for the status - info
the response property
became required for the status - info
the response property
became required for the status - info
the response property
became required for the status - info
the response property
/became required for the status - info
the response property
/became required for the status - info
the response property
/became required for the status - info
the response property
/became required for the status - info
added the required property
/to the response with the status - info
added the required property
/to the response with the status - info
added the required property
/to the response with the status - info
added the required property
/to the response with the status
- info
- breaking
the response property
/became nullable for the status - breaking
the response property
/became nullable for the status - breaking
the response property
/became nullable for the status - breaking
the response property
/became nullable for the status
- breaking