---
title: "Userinfo"
method: POST
path: "/oauth/userinfo"
tags: ["oauth-provider"]
---

# Userinfo

`POST /oauth/userinfo`

## Request

- Base URL: `https://app.thinqos.com` (the document declares no server; this is the origin it was published from)
- URL: `https://app.thinqos.com/oauth/userinfo`
- Auth: none declared

Return the signed-in person's identity claims for a ``tqo_`` access token.

Validation is the same as every other ``tqo_`` surface: the token row via
``ApiKeyService.validate_oauth_token``, an active identity, and the
private-preview product-access gate ``/mcp`` applies. The token must carry
``openid``. ``email_verified`` is true only when Clerk reported the address
verified (``identity_emails.verified_at``); the address itself is returned
only when the grant also carries ``email``.

## Response `200`

Successful Response

- unknown

## Changes

- **2026-10-20** `ce2c2ce318b1`: 1 info
  - api operation id `userinfo_oauth_userinfo_post` removed and replaced with `userinfo_oauth_userinfo_get`

[Operation history](https://skmtc.dev/thinqos/apis/thinqos-api/changes/oauth/userinfo/post.md)

---

[API](https://skmtc.dev/thinqos/apis/thinqos-api.md) · [All operations](https://skmtc.dev/thinqos/apis/thinqos-api/llms.txt) · [OpenAPI document](https://skmtc.dev/thinqos/apis/thinqos-api/revisions/ce2c2ce318b1?raw)