@koduhai/mcp-kit
    Preparing search index...

    Interface IntrospectionVerifierOptions

    interface IntrospectionVerifierOptions {
        authMethod?: "basic" | "post";
        cacheTtlSeconds?: number;
        clientId: string;
        clientSecret: string;
        fetch?: (
            input: string | URL | Request,
            init?: RequestInit,
        ) => Promise<Response>;
        introspectionUrl: string;
        maxCacheEntries?: number;
        now?: () => number;
        retries?: number;
        retryBaseDelayMs?: number;
        timeoutMs?: number;
    }
    Index

    Properties

    authMethod?: "basic" | "post"

    How to present the client credentials. Default basic (HTTP Basic).

    cacheTtlSeconds?: number

    Cache successful introspection results for this many seconds, so a burst of requests bearing the same token does not introspect on every call. The cached entry never outlives the token's own exp. Default 60. Set 0 to introspect on every request (instant revocation visibility, at the cost of more AS load).

    clientId: string

    Client credentials this Resource Server uses to authenticate to the introspection endpoint.

    clientSecret: string
    fetch?: (input: string | URL | Request, init?: RequestInit) => Promise<Response>

    Injectable for tests.

    introspectionUrl: string

    The OAuth 2.0 token introspection endpoint (RFC 7662).

    maxCacheEntries?: number

    Maximum number of cached tokens; oldest entries are evicted first. Default 1000.

    now?: () => number

    Injectable clock (ms).

    retries?: number

    Retries for transient introspection failures (network, 429, 5xx). Default 0.

    retryBaseDelayMs?: number

    Base backoff (ms), doubled each retry. Default 200.

    timeoutMs?: number

    Timeout (ms) for the introspection request. Default 10000. Pass 0 to disable.