Skip to main content

​
Issue a token

curl -X POST https://api.antiailabs.com/oauth/token \
  -d "grant_type=client_credentials" \
  -d "client_id=YOUR_CLIENT_ID" \
  -d "client_secret=YOUR_CLIENT_SECRET" \
  -d "scope=db:read"
Response: 
{
  "access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "token_type": "Bearer",
  "expires_in": 600,
  "scope": "db:read"
}

​
Verify a token

curl -X POST https://api.antiailabs.com/oauth/introspect/v2 \
  -H "X-API-Key: YOUR_ADMIN_API_KEY" \
  -d "token=AGENT_ACCESS_TOKEN"
Active: {"active": true, "sub": "agent-uuid", "scope": "db:read", "exp": 1712000600} Expired or revoked: {"active": false}

​
Revoke a token

curl -X POST https://api.antiailabs.com/oauth/revoke \
  -H "Authorization: Bearer YOUR_CLERK_JWT" \
  -d "token=ACCESS_TOKEN_TO_REVOKE"

​
List / History

GET /api/v1/tokens
GET /api/v1/tokens/history
GET /api/v1/tokens/history?agent_id=AGENT_ID&termination_reason=manual_revocation

​
JWKS endpoint

GET /.well-known/jwks.json
Unauthenticated. Returns all active public keys for JWT verification.