---
title: "Introspect"
method: POST
path: "/api/oauth/introspect"
tags: ["oauth"]
---

# Introspect

`POST /api/oauth/introspect`

OAuth 2.0 Token Introspection Endpoint (RFC 7662)

Allows clients to check if a token is valid and get its metadata.

Returns:
- active: Whether the token is currently active
- scopes: List of authorized scopes (if active)
- client_id: The client the token was issued to (if active)
- user_id: The user the token represents (if active)
- exp: Expiration timestamp (if active)
- token_type: "access_token" or "refresh_token" (if active)

## Request body

- BodyPostOauthIntrospect
  - `token` string, required — Token to introspect
  - `token_type_hint` 'access_token' | 'refresh_token', nullable — Hint about token type ('access_token' or 'refresh_token')
  - `client_id` string, required — Client identifier
  - `client_secret` string, required — Client secret

## Response `200`

Successful Response

- TokenIntrospectionResult — Result of token introspection (RFC 7662)
  - `active` boolean, required
  - `scopes` string[], nullable
  - `client_id` string, nullable
  - `user_id` string, nullable
  - `exp` integer, nullable
  - `token_type` 'access_token' | 'refresh_token', nullable

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.net/significant-gravitas/apis/autogpt-agent-server.md) · [All operations](https://skmtc.net/significant-gravitas/apis/autogpt-agent-server/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/significant-gravitas/autogpt-agent-server/versions/382041c7ecb2/schema)