{"uid":"cap_819Ak2S5t_vHvE_jfHrQR","slug":"netintel-production-440c-up-railway-app-1ae5b199","name":"JWT Token Decoder & Inspector","description":"Decode and inspect any JWT token — extracts header algorithm, payload claims, expiry status, issued-at time, audience, issuer, and subject without requiring the secret — so agents can debug auth issues, check token expiry, and extract identity claims from tokens in pipelines.","url":"https://netintel-production-440c.up.railway.app/jwt-inspector/decode?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["token"],"properties":{"token":{"type":"string","description":"JWT token string (3 dot-separated segments); a 'Bearer ' prefix is stripped automatically"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"grade":{"type":"string"},"score":{"type":"number"},"header":{"type":"object"},"payload":{"type":"object"},"findings":{"type":"array"},"is_expired":{"type":["boolean","null"],"description":"null when the token has no exp claim"},"human_expiry":{"type":["string","null"]},"signature_hex":{"type":"string"},"security_flags":{"type":"array"},"valid_structure":{"type":"boolean"},"signature_present":{"type":"boolean"},"seconds_until_expiry":{"type":["number","null"]}}}}}}},"responseSchema":{"type":"json","example":{"grade":"B","score":80,"header":{"key_id":null,"algorithm":"HS256","token_type":"JWT"},"payload":{"issuer":null,"jwt_id":null,"subject":"1234567890","audience":null,"issued_at":"2018-01-18T01:30:22.000Z","expires_at":null,"not_before":null,"custom_claims":{"name":"John Doe"},"issued_at_unix":1516239022,"expires_at_unix":null},"findings":[{"rule":"no_expiry_claim","label":"No expiry claim","detail":"JWT has no exp claim — token never expires","impact":-20}],"is_expired":null,"human_expiry":null,"signature_hex":"49f94ac7044948c78a285d904f87f0a4c7897f7e8f3a4eb2255fda750b2cc397","security_flags":["no_expiry"],"valid_structure":true,"signature_present":true,"seconds_until_expiry":null}},"example":{"request":{"input":{"type":"http","method":"GET","queryParams":{"token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"}}},"response":{"grade":"B","score":80,"header":{"key_id":null,"algorithm":"HS256","token_type":"JWT"},"payload":{"issuer":null,"jwt_id":null,"subject":"1234567890","audience":null,"issued_at":"2018-01-18T01:30:22.000Z","expires_at":null,"not_before":null,"custom_claims":{"name":"John Doe"},"issued_at_unix":1516239022,"expires_at_unix":null},"findings":[{"rule":"no_expiry_claim","label":"No expiry claim","detail":"JWT has no exp claim — token never expires","impact":-20}],"is_expired":null,"human_expiry":null,"signature_hex":"49f94ac7044948c78a285d904f87f0a4c7897f7e8f3a4eb2255fda750b2cc397","security_flags":["no_expiry"],"valid_structure":true,"signature_present":true,"seconds_until_expiry":null}},"exampleRequest":{"token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"},"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_EdZ9OyMwjteiKVprdQAhN","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Decodes and inspects any JWT token, extracting header, payload claims, expiry status, security flags, and a security grade without requiring the signing secret.","exampleAgentPrompt":"Can you decode this JWT token and tell me if it's expired, what algorithm it uses, who the subject is, and whether there are any security issues: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c","exampleUseCases":null,"resultDescription":"Returns a security grade (A-F), numeric score, decoded header (algorithm, key ID, token type), parsed payload (subject, issuer, audience, issued-at, expiry timestamps, custom claims), security flags (e.g. no_expiry, weak algorithm), detailed findings with impact scores, expiry status, human-readable expiry time, seconds until expiry, and signature hex.","failureModes":["Malformed JWT (not 3 dot-separated segments) returns invalid structure error","Missing token query parameter returns 400","Token with invalid base64 encoding fails to decode payload","Very large tokens may timeout"],"whenToPreferThis":"Use this endpoint when you need to inspect JWT contents without the signing secret — ideal for debugging auth pipelines, checking token expiry before API calls, extracting identity claims for downstream logic, or auditing tokens for security weaknesses like missing expiry or weak algorithms.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T12:38:45.949Z","isFirstParty":false,"canonicalSlug":"netintel-production-440c-up-railway-app-1ae5b199"}