Class Nexus\Mcp\Core\Auth\VerifiedAccessToken

`final`
`readonly`

What a validated bearer token grants, as reported by the host's token validator.

Located at Core/Auth/VerifiedAccessToken.php

Methods


					
	public

__construct(
	list<string> $audience,
	int<1, max> $expiresAt,
	list<non-empty-string> $scopes = [],
	null|non-empty-string $subject = null,
	null|non-empty-string $clientId = null,
)

Parameters

`$audience`	Resources the token was issued for, at least one of which must be this server
`$expiresAt`	Unix timestamp the token expires at
`$scopes`	Scopes the token was granted
`$subject`	Principal the token acts for, absent when it carries no non-empty `sub` claim
`$clientId`	OAuth client the token was issued to, absent when it names none

Constants
`public`	`string`	`REQUEST_ATTRIBUTE = 'nexus.mcp.access_token'` PSR-7 request attribute a validated token travels on. PSR-7 request attribute a validated token travels on.	#

Properties
`public`	`list<string>`	`$audience` Resources the token was issued for, at least one of which must be this server Resources the token was issued for, at least one of which must be this server	#
`public`	`int<1, max>`	`$expiresAt` Unix timestamp the token expires at Unix timestamp the token expires at	#
`public`	`list<non-empty-string>`	`$scopes` Scopes the token was granted Scopes the token was granted	#
`public`	`null\|non-empty-string`	`$subject` Principal the token acts for, absent when it carries no non-empty `sub` claim Principal the token acts for, absent when it carries no non-empty `sub` claim	#
`public`	`null\|non-empty-string`	`$clientId` OAuth client the token was issued to, absent when it names none OAuth client the token was issued to, absent when it names none	#

Namespaces

Classes

Enums

Class Nexus\Mcp\Core\Auth\VerifiedAccessToken

Parameters