---
title: "Introspect"
method: GET
path: "/api/v1/auth/introspect"
tags: ["Auth"]
---

# Introspect

`GET /api/v1/auth/introspect`

Introspect returns the current user's principle_id, user_id and a list of roles, permissions, and enabled features.

## Response `200`

IntrospectResponse contains information about the current user who is authenticated.

- C1ApiAuthV1IntrospectResponse — IntrospectResponse contains information about the current user who is authenticated.
  - `deviceClientId` string — The OAuth client_id of the device client registered for this token. Present only on tokens issued by the device registration grant; the client reads it once and presents it on the subsequent token exchange. Empty for all other tokens.
  - `disabledModules` string[], nullable — The modules turned off for the tenant the logged in user belongs to. Absent from this list means enabled: every module is on by default. Clients MUST treat an unrecognized value as "a module this client does not know about is disabled".
  - `features` string[], nullable — The list of feature flags enabled for the tenant the logged in user belongs to.
  - `permissions` string[], nullable — The list of permissions that the current logged in user has.
  - `principleId` string — The principleID of the current logged in user.
  - `roles` string[], nullable — The list of roles that the current logged in user has.
  - `tenantId` string — The tenantID from the authenticated caller's passport.
  - `userId` string — The userID of the current logged in user.

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/f2cf3228f366/schema)