Use your Chargeblast account to access the developer panel.
Paste an access token issued to one of your apps to check whether it is still valid and which capabilities it grants.
GET /oauth/authorize?response_type=code &client_id=cb_app_... &redirect_uri=https://yourapp.com/callback &scope=disputes:read alerts:read &state=RANDOM_STATE &code_challenge=BASE64URL(SHA256(verifier)) &code_challenge_method=S256
POST /oauth/token Content-Type: application/x-www-form-urlencoded Authorization: Basic base64(client_id:client_secret) grant_type=authorization_code&code=...&redirect_uri=...&code_verifier=...
POST /oauth/introspect
Authorization: Basic base64(client_id:client_secret)
token=eyJ...&required_scopes=disputes:read
→ { "active": true, "scope": "disputes:read alerts:read",
"scope_granted": true, "client_id": "cb_app_...", "exp": 1760600000 }
Tokens can also be validated locally using the JWKS at /.well-known/jwks.json; discovery metadata lives at /.well-known/oauth-authorization-server.