Token endpoint tester

Token endpoint validation

Probe token exchange behavior with a form-encoded POST. The validator checks transport security, OAuth response structure, cache-control, and browser CORS support.

Issuer, Host, or Token Endpoint

Grant type

Client ID

Client auth

Client Secret

Scope

Auto-discovery picks a supported client auth method from metadata when possible.

Ready to validate

Enter a URL or paste JSON above to validate your token endpoint. Results will appear here with a detailed breakdown of all checks.

This tool validates OAuth 2.0 and OpenID Connect token endpoints. It probes POST behavior, checks status and content-type semantics, inspects OAuth error formatting, and verifies browser-facing CORS and cache-control behavior.