Debug Access Token

Updated: Jun 4, 2025

Copy for LLM

The /debug_token endpoint returns metadata about a given access token. This includes data such as the user for which the token was issued, whether the token is still valid, when it expires, and what permissions the app has for the given user.

To access this endpoint, it is required to provide a user access token from a Threads tester, and this access token must be associated with the same app that is linked to the input_token being inspected.

Retrieve an Access Token’s Data

Example Request

curl -i -X GET \
  "https://graph.threads.com/v1.0/debug_token?access_token=<THREADS_TESTER_ACCESS_TOKEN>&input_token=<ACCESS_TOKEN_TO_BE_INSPECTED>"

Parameters

Name	Description
`access_token` string	Required. Threads Graph API user access token of a Threads tester.
`input_token` string	Required. The access token to be inspected (does not need to be a Threads tester but must be associated with the same app as the `access_token` parameter).

Note: The access_token and input_token can be associated with different users but must be associated with the same app.

Example Response

{
  "data": {
    "type": "USER",
    "application": "Threads API Test App",
    "data_access_expires_at": 1754846089,
    "expires_at": 1752254132,
    "is_valid": true,
    "issued_at": 1747070132,
    "scopes": [
      "threads_basic",
      "threads_content_publish",
      "threads_manage_replies",
      "threads_manage_insights",
      "threads_read_replies",
      "threads_manage_mentions",
      "threads_keyword_search",
      "threads_location_tagging"
    ],
    "user_id": "1234567890123456"
  }
}

Fields

Name	Description
`data` object	Data wrapper around the result.
`type` string	Whether the access token is an app access token or user access token.
`application` string	Name of the application this access token is for.
`data_access_expires_at` Unixtime	Timestamp when the app’s access to user data expires.
`expires_at` Unixtime	Timestamp when this access token expires.
`is_valid` Boolean	Whether the access token is still valid or not.
`issued_at` Unixtime	Timestamp when this access token was issued.
`scopes` string[]	List of permissions that the user has granted for the app in this access token.
`user_id` string	The ID of the user this access token is for.