> ## Documentation Index
> Fetch the complete documentation index at: https://docs.attio.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Introspect

Check whether an access token is valid, and if so, what scopes and identity it grants. A bearer token should be passed in the `Authorization` header of the request.

## Response

### Inactive Token

<ResponseField name="active" type="boolean" required>
  Whether the token is currently active and usable. Returns `false` for invalid or expired tokens.
</ResponseField>

### Active Token

<ResponseField name="active" type="boolean" required>
  Whether the token is currently active and usable. Returns `true` for valid tokens.
</ResponseField>

<ResponseField name="scope" type="string" required>
  A space-separated list of scopes associated with this token.
</ResponseField>

<ResponseField name="client_id" type="string" required>
  The app ID of the OAuth app that requested this token.
</ResponseField>

<ResponseField name="token_type" type="string" required default="Bearer">
  The type of token. Always `"Bearer"` for tokens acquired via the OAuth 2.0 flow.
</ResponseField>

<ResponseField name="exp" type="number | null" required>
  The time at which this token will expire, if set, as a number of seconds since January 1 1970 UTC.
</ResponseField>

<ResponseField name="iat" type="number" required>
  The time at which this token was issued, as a number of seconds since January 1 1970 UTC.
</ResponseField>

<ResponseField name="sub" type="string" required>
  Since Bearer tokens grant workspace-level permissions, this property contains the workspace ID.
</ResponseField>

<ResponseField name="aud" type="string" required>
  The intended audience for this token. For Bearer tokens this is the same as the `client_id`.
</ResponseField>

<ResponseField name="iss" type="string" required default="attio.com">
  The issuer of the token. Always `"attio.com"`.
</ResponseField>

<ResponseField name="authorized_by_workspace_member_id" type="string" required>
  The ID of the workspace member who authorized this token initially.
</ResponseField>

<ResponseField name="workspace_id" type="string" required>
  The ID of the workspace the token is scoped to.
</ResponseField>

<ResponseField name="workspace_name" type="string" required>
  The name of the workspace the token is scoped to.
</ResponseField>

<ResponseField name="workspace_slug" type="string" required>
  The slug of the workspace the token is scoped to.
</ResponseField>

<ResponseField name="workspace_logo_url" type="string | null" required>
  The logo URL of the workspace the token is scoped to.
</ResponseField>