# Token/introspect always returns false even though tokens are valid

**URL:** <https://forum.keycloak.org/t/token-introspect-always-returns-false-even-though-tokens-are-valid/2607>\
**Category:** Miscellanaeous\
**Tags:** authentication\
**Created:** [May 8, 2020, 9:44pm UTC](https://forum.keycloak.org/t/token-introspect-always-returns-false-even-though-tokens-are-valid/2607 "2020-05-08T21:44:10Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![wyllys66](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/wyllys66/32/803_2.png) [@wyllys66](https://forum.keycloak.org/u/wyllys66)\
**Post date:** [May 8, 2020, 9:44pm UTC](https://forum.keycloak.org/t/token-introspect-always-returns-false-even-though-tokens-are-valid/2607/1 "2020-05-08T21:44:10Z")

</div>

Running Keycloak v8.0.1

I can create valid tokens for my client, however, when I try to evaluate them using the token/introspect API, the result is always {“active”: False}, even though the session that was created when I generated the token is still valid (can see it in the UI under sessions).

I feel like perhaps my keycloak realm client lacks permissions to use the token/introspect api. Is there some switch I need to set or special permission or role that the client needs in order for introspection to succeed?

Thanks,  
Wyllys Ingersoll