Skip to main content

Inspect the current token

GET 
/oauth/introspect

What this token can do: which account it belongs to and exactly which scopes it holds.

Call it first when something is unexpected. Between the account id and the scope list it explains almost every surprising 403, and it costs nothing.

Responses​

The token is valid.

Response Headers
    X-Request-Id

    Correlation id for this request. Quote it when reporting a problem.