> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tight.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Introspect Access Token

> Inspect an access token to verify its validity and retrieve its metadata



## OpenAPI

````yaml openapi-oauth.yaml POST /v6/auth/introspect
openapi: 3.1.0
info:
  title: Tight OAuth API
  description: OAuth 2.0 endpoints for the Tight API
  version: 6.0.0
servers:
  - url: https://sandbox.tight.com
    description: Sandbox
  - url: https://prod.tight.com
    description: Production
security: []
paths:
  /v6/auth/introspect:
    post:
      tags:
        - OAuth
      summary: Introspect access token
      description: >
        Inspect an access token to determine its validity and metadata.


        Returns token claims including active status, subject, expiration, and
        scopes.

        Authenticate using HTTP Basic auth (`client_secret_basic`)
      operationId: postIntrospect
      requestBody:
        required: true
        content:
          application/x-www-form-urlencoded:
            schema:
              type: object
              required:
                - token
              properties:
                token:
                  type: string
                  description: The access token to introspect.
      responses:
        '200':
          description: Token introspection result
          content:
            application/json:
              schema:
                type: object
                required:
                  - active
                properties:
                  active:
                    type: boolean
                    description: Whether the token is currently active and valid.
                    example: true
                  sub:
                    type: string
                    description: >-
                      Subject identifier — the user or client the token was
                      issued to.
                    example: your_userId
                  client_id:
                    type: string
                    description: The client ID associated with the token.
                    example: your_client_id
                  exp:
                    type: integer
                    description: Unix timestamp indicating when the token expires.
                    example: 1780000000
                  iat:
                    type: integer
                    description: Unix timestamp indicating when the token was issued.
                    example: 1779996400
                  scope:
                    type: string
                    description: Space-separated list of scopes granted to the token.
                  token_type:
                    type: string
                    example: Bearer
      security:
        - basicAuth: []
        - {}
components:
  securitySchemes:
    basicAuth:
      type: http
      scheme: basic
      description: HTTP Basic authentication using `client_id:client_secret`

````