---
title: "Introspect Access Token"
method: POST
path: "/v1/oauth2/token/introspect"
tags: ["OAuth 2.0 Tokens"]
---

# Introspect Access Token

`POST /v1/oauth2/token/introspect`

## Response `200`

OK with information about the token, as specified in OAuth2 Introspect Token

- OAuth2IntrospectToken
  - `active` boolean, required — A boolean value indicating whether or not the token is active.
  - `client_id` string, required — The client ID.
  - `expires_in` number, required — The remaining lifetime in seconds of the access token.
  - `expires` number, required — Timestamp for when this token expires (expressed in milliseconds since Unix epoch).
  - `scope` string, required — Space-separated list of scopes allowed on this token.
  - `token_type` string, required — The type of token returned (currently, always "bearer").
  - `user_id` number, required — ID of the user this token is on behalf of. Only returned when the token was granted on behalf of a user. Mutually exclusive with `account_id`.
  - `account_id` number, required — ID of the account this token is on behalf of. Only returned when the token was granted on behalf of an account. Mutually exclusive with `user_id`.

## Other responses

- `401` — Unauthorized if the client credentials are invalid.

---

[API](https://skmtc.net/lucid/apis/lucid-rest-api.md) · [All operations](https://skmtc.net/lucid/apis/lucid-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/lucid/lucid-rest-api/revisions/6a32cb9e1aa7/schema)