To successfully make a POST request to the

/admin/oauth2/introspect

endpoint, you must authenticate your request using a valid Ory access token. According to the Ory API reference, this operation requires authentication by means of the

oryAccessToken

method. This means you need to include a valid Ory access token in your request, typically in the

Authorization

header as a Bearer token:

Authorization: Bearer <ory-access-token>

If you use invalid or missing credentials, you will receive an "Access credentials are invalid" error. Make sure you are using a valid access token that has the necessary permissions to access the introspection endpoint. If you are unsure how to obtain this token, refer to your Ory project's authentication setup or the Ory CLI documentation for generating or retrieving an access token for API requests [Ory API Reference](https://raw.githubusercontent.com/ory/docs/master/docs/reference/api.json). If you are using Ory Hydra in a self-hosted setup, note that the introspection endpoint requires authentication, but any valid client credentials (client ID and secret) that are allowed to introspect tokens can be used. Ensure you are using the correct credentials as configured for your OAuth2 client [Hydra Self-hosted Production](https://www.ory.sh/docs/hydra/self-hosted/production#exposing-administrative-and-public-api-endpoints). If you continue to have issues, double-check that: - The credentials (access token or client credentials) are correct and not expired. - The client is configured with the correct

token_endpoint_auth_method

(e.g.,

client_secret_basic

or

client_secret_post

) if using client credentials. - You are sending the credentials in the correct format as required by the endpoint. If you need more details on how to authenticate, please provide your setup (Ory Network, Ory Hydra self-hosted, etc.) for more specific guidance.