{"uid":"cap_6liiOhGAk_pbotk4FQq44","slug":"jwt-decoder-6424c853","name":"JWT Decoder","description":"Decode a JWT — parse header and payload claims without a key (no signature verification).","url":"https://conclavex402p04.pythonanywhere.com/u/jwt?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"type":"object"},"type":{"type":"string","const":"http"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"headers":{"type":"object","additionalProperties":{"type":"string"}},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"pathParams":{"type":"object","additionalProperties":{"type":"string"}},"queryParams":{"type":"object","additionalProperties":{"type":"string"}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"header":{"alg":"none"},"payload":{"sub":"1"}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_g2mCUIOBULUhj8zErE9Dq","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Decodes a JWT token, parsing its header and payload claims without verifying the signature.","exampleAgentPrompt":"Can you decode this JWT for me and show me what's in the header and payload? Here's the token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c","exampleUseCases":[{"title":"Debug failing auth token","prompt":"I'm getting a 401 and I want to see what's inside this JWT to figure out if the claims look right — can you decode it and show me the header and payload? Token: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c3IxMjMiLCJleHAiOjE3MjAwMDAwMDB9.signature"},{"title":"Check token expiry before request","prompt":"Before I make this API call, can you parse this JWT and tell me what the exp and iat claims say? I need to know if it's already expired. Token: eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ1c2VyQGV4YW1wbGUuY29tIiwiaWF0IjoxNzAwMDAwMDAwLCJleHAiOjE3MDAwMDM2MDB9.sig"},{"title":"Identify JWT signing algorithm","prompt":"What algorithm is this JWT using — can you decode the header and tell me? I need to know if it's RS256 or HS256 before I configure my verifier. Here's the token: eyJhbGciOiJSUzI1NiIsImtpZCI6ImtleS0xIn0.eyJzdWIiOiJhYmMifQ.sig"}],"resultDescription":"Returns a JSON object with two top-level keys: 'header' (containing JWT header fields like alg and typ) and 'payload' (containing all claims encoded in the JWT body such as sub, iat, exp, and any custom claims). No signature verification is performed.","failureModes":["Malformed or non-base64 JWT input returns an error","Missing or empty token body causes validation failure","Token with too many or too few segments (not 3-part) may fail to parse","Payment failure (402) if x402 payment is not included or insufficient"],"whenToPreferThis":"Use this endpoint when you need to quickly inspect the contents of a JWT — its header fields (algorithm, key ID) and payload claims (subject, expiry, custom data) — without needing to verify its authenticity. Ideal for debugging, logging, or pre-flight inspection in agent pipelines where signature verification is handled elsewhere.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-18T06:45:22.813Z","isFirstParty":false,"canonicalSlug":"jwt-decoder-6424c853"}