---
title: "Debug consumer access token"
method: GET
path: "/v2/consumers/{accessToken}/debug"
tags: ["Authentication"]
---

# Debug consumer access token

`GET /v2/consumers/{accessToken}/debug`

Returns metadata for a consumer (person) access token by value, including tokens that are expired or invalidated. Distinct from client access token debug (`GET /v4/tokens/{token}/debug`) and managed API tokens (`/v4/tokens/managed`). Requires a user access token with the `CLIENT_ADMIN` scope.

## Path parameters

- `accessToken` string, required

## Response `200`

Successful response

- ConsumerTokenDetailsResponse
  - `access_token` string, required — Opaque consumer access token these details describe.
  - `client_id` string, required — Identifier of the client that owns the token.
  - `expired` boolean, required — True when the token is no longer valid, whether it lapsed on its own or was invalidated.
  - `expires_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.
  - `invalidated` boolean, required — True when the token was explicitly invalidated (revoked), as opposed to expiring on its own. Detected when updated_at is later than expires_at.
  - `person_id` string, required — Identifier of the person the token represents.
  - `scopes` string[], required — Permission scopes granted to the token.
  - `updated_at` string, required — [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) or [RFC 9557](https://datatracker.ietf.org/doc/html/rfc9557#section-4) date-time with a numeric [UTC offset](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) and an optional [IANA time-zone](https://datatracker.ietf.org/doc/html/rfc9557#section-4) suffix in square brackets. Precision up to milliseconds.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `402` — Payment Required
- `403` — Forbidden
- `415` — Unsupported Media Type
- `429` — Too Many Requests

---

[API](https://skmtc.net/extole/apis/integration-api-server-to-extole.md) · [All operations](https://skmtc.net/extole/apis/integration-api-server-to-extole/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/extole/integration-api-server-to-extole/revisions/c16e62e66755/schema)