---
title: "Introspect Token"
method: POST
path: "/idp/token/introspect"
tags: ["Identity Provider"]
---

# Introspect Token

`POST /idp/token/introspect`

OAuth2 Token Introspection Endpoint (RFC 7662).

Token format includes embedded token_id for O(1) lookup, so client auth is optional.

Allows clients to check if a token is still valid and get metadata about it.
Useful for determining if a user needs to re-authenticate.

Returns:
    - active: Whether the token is currently valid
    - exp: Expiration timestamp (Unix epoch)
    - iat: Issued at timestamp
    - scope: Space-separated list of scopes
    - client_id: The client that the token was issued to
    - username: The user's username
    - sub: The user's ID

## Response `200`

Successful Response

- unknown

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.net/chutes/apis/fastapi.md) · [All operations](https://skmtc.net/chutes/apis/fastapi/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/chutes/fastapi/revisions/352418d4e3a2/schema)