Introspect an access token

Request

Returns metadata for an active access token issued to the authenticated client. Inactive, expired, or revoked tokens return {"active": false}.

Security

clientSecretBasic

Body

required

tokenstringrequired

Access token to inspect or revoke.

Example:"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.example.signature"

curl -i -X POST https://dev-api.wisedocs.ai/oauth/introspect \
  -u '<client_id>:<client_secret>' \
  -d token='<access_token>'

Responses

Token activity and metadata.

Headers

Cache-Controlstring

Example:"no-store"

Pragmastring

Example:"no-cache"

Bodyapplication/json

activebooleanrequired

Whether the token is active.

Example:true

expinteger

Token expiry as a Unix timestamp. Present only for an active token.

Example:1791907200

tenantstring

Tenant identifier. Present only for an active token.

Example:"example-tenant"

uuidstring, (uuid)

API client UUID. Present only for an active token.

Example:"5ae8db5d-f7e7-473d-92b3-eb51d8bac0d2"

scopestring

Space-delimited scopes granted to the token.

Example:"cases:read files:read"

Response

{
  "active": true,
  "exp": 1791907200,
  "tenant": "example-tenant",
  "uuid": "5ae8db5d-f7e7-473d-92b3-eb51d8bac0d2",
  "scope": "cases:read files:read"
}