{"uid":"cap_5UL3ifZD5Ae7kmXo94PTz","slug":"x402-deployer-x402-deployer-workers-dev-dae356ee","name":"JWT Decoder / JSON Web Token Inspector","description":"JWT decoder / JWT parser / JSON Web Token inspector / Bearer token debugger / OAuth ID-token reader / Auth0 + Cognito + Firebase token inspector. Base64URL-decodes header and payload, parses standard claims (iss, aud, sub, exp, iat, nbf, jti), reports algorithm, key id (kid), token type (typ), TTL, and clock-validity (is_expired / is_not_yet_valid / is_currently_valid_by_clock). Does NOT verify signatures — for inspection only, never trust output for auth decisions.","url":"https://x402-deployer.x402-deployer.workers.dev/jwt-decode","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"required":["jwt"],"properties":{"jwt":{"type":"string","description":"Compact-serialization JWT string (three base64url segments separated by '.'). May be prefixed with 'Bearer ' — that prefix is stripped automatically."}}},"type":{"type":"string","const":"http"},"method":{"enum":["POST"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"note":{"type":"string"},"type":{"type":"null"},"claims":{"type":"object","properties":{"jti":{"type":"null"},"issuer":{"type":"null"},"subject":{"type":"string"},"audience":{"type":"null"},"issued_at":{"type":"null"},"expires_at":{"type":"null"},"not_before":{"type":"null"},"ttl_seconds":{"type":"null"}}},"header":{"type":"object","properties":{"alg":{"type":"string"}}},"key_id":{"type":"null"},"payload":{"type":"object","properties":{"sub":{"type":"string"}}},"algorithm":{"type":"string"},"signature":{"type":"string"},"is_expired":{"type":"boolean"},"is_not_yet_valid":{"type":"boolean"},"payload_size_bytes":{"type":"integer"},"is_currently_valid_by_clock":{"type":"boolean"}}}}}}},"responseSchema":null,"example":{"request":{"input":{"body":{"jwt":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyMTIzIiwiaXNzIjoiZXhhbXBsZS5jb20iLCJleHAiOjk5OTk5OTk5OTksImlhdCI6MTYwMDAwMDAwMH0.test_signature"},"type":"http","method":"POST","bodyType":"json"}},"response":{"note":"Signature is NOT verified. This endpoint only decodes structure. To verify, fetch the issuer's JWKS and validate against the alg + kid.","type":"JWT","claims":{"jti":null,"issuer":"example.com","subject":"user123","audience":null,"issued_at":"2020-09-13T12:26:40.000Z","expires_at":"2286-11-20T17:46:39.000Z","not_before":null,"ttl_seconds":8219299771},"header":{"alg":"HS256","typ":"JWT"},"key_id":null,"payload":{"exp":9999999999,"iat":1600000000,"iss":"example.com","sub":"user123"},"algorithm":"HS256","signature":"test_signature","is_expired":false,"is_not_yet_valid":false,"payload_size_bytes":71,"is_currently_valid_by_clock":true}},"exampleRequest":{"jwt":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyMTIzIiwiaXNzIjoiZXhhbXBsZS5jb20iLCJleHAiOjk5OTk5OTk5OTksImlhdCI6MTYwMDAwMDAwMH0.test_signature"},"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_lJUHIh9IKCXQje182l8St","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Decodes and inspects JWT tokens by parsing header, payload, and standard claims without signature verification","exampleAgentPrompt":"Can you decode this JWT for me and tell me who issued it, what the subject is, whether it's expired, and what algorithm it uses: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwiaXNzIjoiYXV0aDAuY29tIiwiZXhwIjoxNjAwMDAwMDAwfQ.signature","exampleUseCases":null,"resultDescription":"Returns decoded JWT header fields (algorithm, kid, typ), payload with all standard claims (iss, aud, sub, exp, iat, nbf, jti), computed TTL in seconds, and clock-validity status flags (is_expired, is_not_yet_valid, is_currently_valid_by_clock). Does not verify the signature.","failureModes":["Malformed or non-JWT string returns a parse error","Token with invalid Base64URL encoding fails to decode","Missing required token field returns a 400-level error","Expired token is still decoded but flagged as is_expired=true"],"whenToPreferThis":"Use this endpoint when you need to quickly inspect or debug the contents of a JWT token — extracting claims like issuer, subject, expiration, and algorithm — without needing to verify its cryptographic signature. Ideal for debugging Auth0, Cognito, Firebase, or generic OAuth tokens during development or troubleshooting.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T00:47:36.444Z","isFirstParty":false}