v1

latestOpenAPI 3.0.12026-07-244011,5573.5 MB

Authentication

Debug consumer access token

Returns metadata for a consumer (person) access token by value, including tokens that are expired or invalidated. Distinct from client access token debug (GET /v4/tokens/{token}/debug) and managed API tokens (/v4/tokens/managed). Requires a user access token with the CLIENT_ADMIN scope.

get/v2/consumers/{accessToken}/debug

Path parameters

accessTokenstring required

Response

Successful response

access_tokenstring required

Opaque consumer access token these details describe.

client_idstring required

Identifier of the client that owns the token.

expiredboolean required

True when the token is no longer valid, whether it lapsed on its own or was invalidated.

expires_atstring required

RFC 3339 or RFC 9557 date-time with a numeric UTC offset and an optional IANA time-zone suffix in square brackets. Precision up to milliseconds.

invalidatedboolean required

True when the token was explicitly invalidated (revoked), as opposed to expiring on its own. Detected when updated_at is later than expires_at.

person_idstring required

Identifier of the person the token represents.

scopesstring[] required

Permission scopes granted to the token.

updated_atstring required

RFC 3339 or RFC 9557 date-time with a numeric UTC offset and an optional IANA time-zone suffix in square brackets. Precision up to milliseconds.

Example response

{
  "expires_at": "2025-10-24T02:00:00-07:00",
  "updated_at": "2025-10-24T02:00:00-07:00"
}