Skip to main content
POST
cURL

Authorizations

Authorization
string
header
required

A confidential OAuth client's client_id and client_secret, sent as HTTP Basic credentials. Register the client with your secret key to receive them; see POST /oauth/register.

Body

application/x-www-form-urlencoded

An introspection request, as RFC 7662 defines it.

token
string
required

The token the client presented.

token_type_hint
enum<string>

Optional. A License token is an access token.

Available options:
access_token
resource
string<uri>

The content the token was presented for: the facet IRI, or the URL of a file under it. permitted in the result is about this resource.

Response

Whether the token is active, and what it covers.

Whether a token is active, as RFC 7662 returns it. An inactive token returns only active.

active
boolean
required

true while the token is unexpired and the license it draws on is active.

token_type
enum<string>

Always License.

Available options:
License
permitted
boolean

Whether the token covers resource. Serve the content only when this and active are both true.

client_id
string

The client the token was issued to.

resource
string<uri>

The facet IRI the token was issued for.

usage
string[]

The RSL usage values the token covers, such as ai-input.

talent
string

The talent whose facet the token covers.

Pattern: ^tal_[0-9a-hjkmnp-tv-z]{26}$
license
string | null

The license the token draws on. null when the talent's posture allows the usage without a license.

Pattern: ^lic_[0-9a-hjkmnp-tv-z]{26}$
livemode
boolean

true for a live-mode token.

iat
integer

Unix seconds when the token was issued.

exp
integer

Unix seconds when the token expires.