Gluu

Gluu Token Introspection API

The Token Introspection API from Gluu — 1 operation(s) for token introspection.

Documentation GitHub OpenAPI

Operations 2

GET /restv1/rpt/status The Introspection OAuth 2 Endpoint for RPT #

POST /restv1/rpt/status The Introspection OAuth 2 Endpoint for RPT #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/gluu-token-introspection-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Janssen Authorization Server Token Introspection API
  description: Janssen Authorization Server - OAuth 2.0 server; OpenID Connect Provider (OP) & UMA Authorization Server (AS)
  contact:
    name: Contact
    url: https://github.com/JanssenProject/jans/discussions
  license:
    name: License
    url: https://github.com/JanssenProject/jans/blob/main/LICENSE
  version: OAS Version
servers:
- url: https://jans.local.io/jans-auth
tags:
- name: Token Introspection
paths:
  /restv1/rpt/status:
    get:
      tags:
      - Token Introspection
      summary: The Introspection OAuth 2 Endpoint for RPT
      description: The Introspection OAuth 2 Endpoint for RPT.
      operationId: get-rpt-status
      parameters:
      - name: Authorization
        in: header
        required: true
        schema:
          type: string
      - name: token
        in: query
        required: true
        schema:
          type: string
      - name: token_type_hint
        in: query
        schema:
          type: string
      responses:
        200:
          description: OK
          content:
            application/json:
              schema:
                title: RptIntrospectionResponse
                type: object
                required:
                - active
                - permissions
                - resource_id
                - resource_scopes
                properties:
                  active:
                    type: boolean
                    description: Boolean indicator of whether or not the presented token is currently active.
                  exp:
                    type: integer
                    description: Integer timestamp, in seconds since January 1 1970 UTC, indicating when this token will expire.
                    format: int64
                    example: 1256953732
                  iat:
                    type: integer
                    description: Integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating when this permission was originally issued.
                    example: 1256953732
                  clientId:
                    type: string
                    description: Client id used to obtain RPT.
                  sub:
                    type: string
                    description: Subject of the token. Usually a machine-readable identifier of the resource owner who authorized this token.
                  aud:
                    type: string
                    description: Service-specific string identifier or list of string identifiers representing the intended audience for this token.
                  permissions:
                    type: array
                    items:
                      type: object
                      description: List of UmaPermission granted to RPT. A permission is (requested or granted) authorized access to a particular resource with some number of scopes  bound to that resource.
                      required:
                      - resource_id
                      - resource_scopes
                      properties:
                        resource_id:
                          type: string
                          description: A string that uniquely identifies the protected resource, access to which has been granted to this client on behalf of this requesting party. The identifier MUST correspond to a resource that was previously registered as protected.
                        resource_scopes:
                          type: array
                          description: An array referencing zero or more strings representing scopes to which access was granted for this resource. Each string MUST correspond to a scope that was registered by this resource server for the referenced resource.
                          items:
                            type: string
                        exp:
                          type: integer
                          description: Integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating when this permission will expire. If the token-level exp value pre-dates a permission-level exp value, the token-level value takes precedence.
                        iat:
                          type: integer
                          description: Integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating when this permission was originally issued. If the token-level iat value post-dates a permission-level iat value, the token-level value takes precedence.
                        nbf:
                          type: integer
                          description: Integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating the time before which this permission is not valid. If the token-level nbf value post-dates a permission-level nbf value, the token-level value takes precedence.
                  pct_claims:
                    type: object
                    additionalProperties:
                      type: string
                    description: PCT token claims.
                  iss:
                    type: string
                    description: String representing the issuer of this token, as defined in JWT [RFC7519].
                  jti:
                    type: string
                    description: String identifier for the token, as defined in JWT [RFC7519].
                  nbf:
                    type: integer
                    description: Integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating the time before which this permission is not valid.
                  resource_id:
                    type: string
                    description: Resource ID.
                  resource_scopes:
                    type: array
                    items:
                      type: string
        405:
          description: Introspection of RPT is not allowed.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        500:
          description: Invalid parameters provided to endpoint.
          content:
            application/json:
              schema:
                type: object
                required:
                - error
                - error_description
                properties:
                  error:
                    type: string
                    format: enum
                    example:
                    - server_error
                  error_description:
                    type: string
                  details:
                    type: string
    post:
      tags:
      - Token Introspection
      summary: The Introspection OAuth 2 Endpoint for RPT
      description: The Introspection OAuth 2 Endpoint for RPT.
      operationId: post-rpt-status
      parameters:
      - name: Authorization
        in: header
        required: true
        description: Client Authorization details that contains the access token along with other details.
        schema:
          type: string
      requestBody:
        content:
          application/x-www-form-urlencoded:
            schema:
              type: object
              required:
              - token
              properties:
                token:
                  type: string
                  description: Client access token.
                token_type_hint:
                  type: string
                  description: ID Token previously issued by the Authorization Server being passed as a hint about the End-User.
      responses:
        200:
          description: OK
          content:
            application/json:
              schema:
                title: RptIntrospectionResponse
                type: object
                required:
                - active
                - permissions
                - resource_id
                - resource_scopes
                properties:
                  active:
                    type: boolean
                    description: Boolean indicator of whether or not the presented token is currently active.
                  exp:
                    type: integer
                    description: Integer timestamp, in seconds since January 1 1970 UTC, indicating when this token will expire.
                    format: int64
                    example: 1256953732
                  iat:
                    type: integer
                    description: Integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating when this permission was originally issued.
                    example: 1256953732
                  clientId:
                    type: string
                    description: Client id used to obtain RPT.
                  sub:
                    type: string
                    description: Subject of the token. Usually a machine-readable identifier of the resource owner who authorized this token.
                  aud:
                    type: string
                    description: Service-specific string identifier or list of string identifiers representing the intended audience for this token.
                  permissions:
                    type: array
                    items:
                      type: object
                      description: List of UmaPermission granted to RPT. A permission is (requested or granted) authorized access to a particular resource with some number of scopes  bound to that resource.
                      required:
                      - resource_id
                      - resource_scopes
                      properties:
                        resource_id:
                          type: string
                          description: A string that uniquely identifies the protected resource, access to which has been granted to this client on behalf of this requesting party. The identifier MUST correspond to a resource that was previously registered as protected.
                        resource_scopes:
                          type: array
                          description: An array referencing zero or more strings representing scopes to which access was granted for this resource. Each string MUST correspond to a scope that was registered by this resource server for the referenced resource.
                          items:
                            type: string
                        exp:
                          type: integer
                          description: Integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating when this permission will expire. If the token-level exp value pre-dates a permission-level exp value, the token-level value takes precedence.
                        iat:
                          type: integer
                          description: Integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating when this permission was originally issued. If the token-level iat value post-dates a permission-level iat value, the token-level value takes precedence.
                        nbf:
                          type: integer
                          description: Integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating the time before which this permission is not valid. If the token-level nbf value post-dates a permission-level nbf value, the token-level value takes precedence.
                  pct_claims:
                    type: object
                    additionalProperties:
                      type: string
                      description: PCT token claims.
                      example: '{name:["John"]}'
                  iss:
                    type: string
                    description: String representing the issuer of this token, as defined in JWT [RFC7519].
                  jti:
                    type: string
                    description: String identifier for the token, as defined in JWT [RFC7519].
                  nbf:
                    type: integer
                    description: Integer timestamp, measured in the number of seconds since January 1 1970 UTC, indicating the time before which this permission is not valid.
                  resource_id:
                    type: string
                    description: Resource ID.
                  resource_scopes:
                    type: array
                    items:
                      type: string
        405:
          description: Introspection of RPT is not allowed.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        500:
          description: Invalid parameters provided to endpoint.
          content:
            application/json:
              schema:
                type: object
                required:
                - error
                - error_description
                properties:
                  error:
                    type: string
                    format: enum
                    example:
                    - server_error
                  error_description:
                    type: string
                  details:
                    type: string
components:
  schemas:
    ErrorResponse:
      required:
      - error
      - error_description
      type: object
      properties:
        error:
          type: string
        error_description:
          type: string
        details:
          type: string
  securitySchemes:
    bearer:
      type: http
      scheme: bearer