> ## Documentation Index
> Fetch the complete documentation index at: https://documentation.mysoleas.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Introspect a token

> Verify the state, scopes, and claims of a Mysoleas JWT.

Use introspection when a backend must explicitly verify that a token is active, know its scopes, or control its context before a sensitive operation.


## OpenAPI

````yaml en/api-reference/openapi.json POST /oauth/v2/introspect
openapi: 3.1.0
info:
  title: Mysoleas API
  version: 3.0.0
  description: >-
    New Mysoleas architecture: business gateway, Mysoleas Identity Cloud, and
    SoleasPay ecosystem.
servers:
  - url: https://api.mysoleas.com
    description: Mysoleas gateway
  - url: https://account.mysoleas.com
    description: Mysoleas authentication
security:
  - spAuthToken: []
tags:
  - name: Identity Cloud
  - name: Plugin
  - name: Payment links
  - name: Subscriptions
  - name: Collections
  - name: Disbursements
  - name: Verification
  - name: Catalog
paths:
  /oauth/v2/introspect:
    post:
      tags:
        - Identity Cloud
      summary: Introspect a token
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OAuthIntrospectRequest'
      responses:
        '200':
          description: Resultat d'introspection
          content:
            application/json:
              example:
                active: true
                scope: payments services
                client_id: client_123
                sub: user_123
                exp: 1785230000
                token_type: Bearer
      security: []
      servers:
        - url: https://account.mysoleas.com
components:
  schemas:
    OAuthIntrospectRequest:
      type: object
      required:
        - token
      properties:
        token:
          type: string
        token_type_hint:
          type: string
          enum:
            - access_token
            - refresh_token
        client_id:
          type: string
        client_secret:
          type: string
  securitySchemes:
    spAuthToken:
      type: apiKey
      in: header
      name: x-sp-auth-token
      description: >-
        JWT Bearer emis par Mysoleas Identity Cloud. Format: Bearer
        <access_token>.

````