The access token you are using

GET

/v1/token

curl --request GET \
  --url https://api.gampeon.com/v1/token \
  --header 'Authorization: Bearer <token>'

• Production

Name, scopes and expiry of the access token sent with this request. Works with every valid access token, whatever its scopes. MCP clients and tools use it to check a token and to offer only what it allows. With a portal session: 400 not_an_access_token.

Access tokens: every valid token, no scope needed.

Authorizations

• session
• accessToken

Responses

200

Token

Media typeapplication/json

object

name

required

string

prefix

required

First characters of the token

string

scopes

required

Array<string>

Allowed values: profile:read projects:read projects:write marketplace:read marketplace:write servers:read

createdAt

required

Unix time in milliseconds

integer format: int64

expiresAt

required

Unix time in milliseconds

integer format: int64

Example

{
  "scopes": [
    "profile:read"
  ]
}

400

Error codes: not_an_access_token

Media typeapplication/json

object

error

required

Machine-readable error code, for example not_found or rate_limited.

string

message

Human-readable detail. Only present for some errors.

string

Example ^generated

{
  "error": "example",
  "message": "example"
}

401

Error codes: unauthorized

Media typeapplication/json

object

error

required

Machine-readable error code, for example not_found or rate_limited.

string

message

Human-readable detail. Only present for some errors.

string

Example ^generated

{
  "error": "example",
  "message": "example"
}

403

Error codes:

Media typeapplication/json

object

error

required

Machine-readable error code, for example not_found or rate_limited.

string

message

Human-readable detail. Only present for some errors.

string

Example ^generated

{
  "error": "example",
  "message": "example"
}