{"uid":"cap_7ac5f0G_Cj6KpqkSc5CTO","slug":"relaystation-jwt-verify-daf16de7","name":"RelayStation JWT Verify","description":"$0.0001/call. Verify a JWT signature — algorithm-pinned; the key is never logged. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny","url":"https://api.relaystation.ai/v1/utils/jwt-verify","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"type":"object","properties":{"alg":{"enum":["HS256","HS384","HS512","RS256","RS384","RS512","ES256","ES384"],"type":"string","description":"The verify is pinned to this alg (alg:none and confusion downgrades blocked)."},"key":{"type":"string","minLength":1,"description":"The verification key (secret/PEM/JWK string) — never logged."},"token":{"type":"string","minLength":1}}},"type":{"type":"string","const":"http"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_zkRvHtZwAds7OhUuUaXI_","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Verifies a JWT signature with algorithm pinning, blocking alg:none and algorithm confusion attacks, without logging the key.","exampleAgentPrompt":"Can you verify this JWT token — eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0In0.abc123 — using HS256 and my secret key 'my-super-secret'? Make sure the algorithm is pinned to HS256 so no downgrade is possible.","exampleUseCases":[{"title":"Verify incoming API request token","prompt":"I have an incoming request with this JWT: eyJhbGciOiJSUzI1NiJ9.eyJ1c2VyIjoiYWxpY2UifQ.sig — can you verify its RS256 signature using this PEM public key and tell me if the claims are valid?"},{"title":"Guard against algorithm confusion attacks","prompt":"Check this JWT for me — eyJhbGciOiJIUzUxMiJ9.eyJyb2xlIjoiYWRtaW4ifQ.xyz — pin it strictly to HS512 with my secret 'vault-key-42' so nobody can sneak in an alg:none bypass."},{"title":"Validate user session token in middleware","prompt":"Before letting this request through, verify this ES256 JWT eyJhbGciOiJFUzI1NiJ9.eyJzZXNzaW9uIjoiYWJjIn0.defsig against my EC public key — I need to know if the signature checks out."}],"resultDescription":"Returns whether the JWT signature is valid, along with the decoded header and payload claims if verification succeeds. Algorithm is pinned to the specified value, preventing alg:none and algorithm confusion downgrades. The verification key is never logged.","failureModes":["Invalid signature — token has been tampered with or wrong key provided","Algorithm mismatch — token header alg does not match pinned alg parameter","Malformed JWT — token is not a valid three-part JWT structure","Expired token — exp claim has passed (if claims validation is included)","Missing required fields — token, key, or alg not provided","Unsupported algorithm — alg value outside allowed enum set"],"whenToPreferThis":"Choose this endpoint when you need a fast, security-hardened JWT verification that explicitly blocks alg:none attacks and algorithm confusion vulnerabilities, and when you require that the signing key is never logged or persisted. Ideal for agent pipelines, middleware, and serverless environments where you want a simple pay-per-call verification without managing a crypto library.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T06:48:17.849Z","isFirstParty":false}