You can check the validity of access tokens, and find out which user and which scopes are associated with the token.

For more information about how to access the token introspection endpoint, see POST Token Introspection in the PingOne Platform API Reference.