OIDC Introspect | API Reference | Descope Documentation

POST

/oauth2/v1/introspect

Request Body

application/json

token*string

Length1 <= length <= 10000

token_type_hint?string

ssoAppId?string

Lengthlength <= 100

client_id?string

Client credentials for the caller (the protected resource). RFC 7662 requires client authentication; credentials may arrive here in the body (client_secret_post) or via the Authorization Basic header (client_secret_basic, extracted by the OIDC gateway middleware like the token endpoint).

Lengthlength <= 200

client_secret?string

Lengthlength <= 1000

OIDC token introspection endpoint (RFC 7662)

curl -X POST "https://api.descope.com/oauth2/v1/introspect" \  -H "Content-Type: application/json" \  -d '{    "token": "string"  }'

ResponseOK

{  "result": {}}

TypeScript

export interface Response {/** * RFC 7662 introspection response, flattened to the top-level JSON body via response_body="result". */result?: {}}

Was this helpful?