{"uid":"cap_6-UmcZc00oTHqCfe73WCv","slug":"agent-dev-tools-jwt-decode-e88238ae","name":"Agent Dev Tools – JWT Decode","description":"Fast deterministic developer utilities for AI agents, paid per call in USDC via x402 (no account, no API key): UUID v4/v7, secure random numbers, dice, MD5/SHA/HMAC hashing, base64/hex/URL/HTML encoding, JSON validation/formatting, QR code SVG, password generation, JWT decoding and text statistics. Pure computation, nothing stored. Errors are never charged.","url":"https://agent-dev-tools.frcompanycheck.workers.dev/v1/jwt/decode?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["token"],"properties":{"token":{"type":"string","example":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c","description":"JWT (header.payload.signature)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"times":{"iat":"2018-01-18T01:30:22.000Z"},"header":{"alg":"HS256","typ":"JWT"},"expired":null,"payload":{"iat":1516239022,"sub":"1234567890"},"signature_verified":false}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_TmabtnEkbPD5K1w7TGB39","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Decodes a JWT token into its header, payload, and signature components, and reports expiry status — paid per call in USDC via x402.","exampleAgentPrompt":"Can you decode this JWT for me and tell me what's in the header and payload, and whether it's expired? eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c","exampleUseCases":[{"title":"Debug expired auth token","prompt":"I've got this JWT that might be expired — can you decode it and tell me the issued-at time and whether it's still valid? eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyXzEyMyIsImV4cCI6MTY4MDAwMDAwMH0.abc123"},{"title":"Inspect claims in unknown token","prompt":"Someone sent me this JWT token and I need to know what claims are inside it — can you pull out the payload fields? eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJyb2xlIjoiYWRtaW4iLCJ1c2VySWQiOiI0MiJ9.xyz789"},{"title":"Check JWT signing algorithm","prompt":"What algorithm was used to sign this JWT, and what type is it? eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ0ZXN0In0.signature"}],"resultDescription":"Returns a JSON object containing the decoded JWT header (alg, typ), the full payload with all claims, the signature verification status (true/false), a null or boolean expired field, and human-readable ISO 8601 timestamps for time-based claims like iat (issued at).","failureModes":["Malformed JWT (not three base64-separated segments) returns an error; not charged","Missing required 'token' query parameter returns a validation error","Token with invalid base64 encoding in header or payload returns a parse error","signature_verified will always return false since no secret key is supplied for HMAC verification"],"whenToPreferThis":"Use this endpoint when you need a fast, keyless, no-account JWT inspection tool — ideal for debugging tokens, extracting claims for logging, or checking expiry without needing to verify the signature cryptographically. Prefer this over full auth libraries when you only need to read the token contents, not validate it against a secret.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-16T06:46:08.426Z","isFirstParty":false,"canonicalSlug":"agent-dev-tools-jwt-decode-e88238ae"}