{"uid":"cap_9-PnB2pe2F-0s8PhYXctt","slug":"netintel-jwt-inspector-decoder-19b7f970","name":"NetIntel JWT Inspector / Decoder","description":"Decode and inspect any JWT token — extracts header algorithm, payload claims, expiry status, issued-at time, audience, issuer, and subject without requiring the secret — so agents can debug auth issues, check token expiry, and extract identity claims from tokens in pipelines.","url":"https://netintel.dev/jwt-inspector/decode?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["token"],"properties":{"token":{"type":"string","description":"JWT token string (3 dot-separated segments); a 'Bearer ' prefix is stripped automatically"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"grade":{"type":"string"},"score":{"type":"number"},"header":{"type":"object"},"payload":{"type":"object"},"findings":{"type":"array"},"is_expired":{"type":["boolean","null"],"description":"null when the token has no exp claim"},"human_expiry":{"type":["string","null"]},"signature_hex":{"type":"string"},"security_flags":{"type":"array"},"valid_structure":{"type":"boolean"},"signature_present":{"type":"boolean"},"seconds_until_expiry":{"type":["number","null"]}}}}}}},"responseSchema":{"type":"json","example":{"grade":"B","score":80,"header":{"key_id":null,"algorithm":"HS256","token_type":"JWT"},"payload":{"issuer":null,"jwt_id":null,"subject":"1234567890","audience":null,"issued_at":"2018-01-18T01:30:22.000Z","expires_at":null,"not_before":null,"custom_claims":{"name":"John Doe"},"issued_at_unix":1516239022,"expires_at_unix":null},"findings":[{"rule":"no_expiry_claim","label":"No expiry claim","detail":"JWT has no exp claim — token never expires","impact":-20}],"is_expired":null,"human_expiry":null,"signature_hex":"49f94ac7044948c78a285d904f87f0a4c7897f7e8f3a4eb2255fda750b2cc397","security_flags":["no_expiry"],"valid_structure":true,"signature_present":true,"seconds_until_expiry":null}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_bshwxB36kPy3eGl0_jpi4","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Decodes and security-audits a JWT token, returning parsed header/payload fields, expiry status, a security grade, and detected security flags.","exampleAgentPrompt":"Can you decode and security-audit this JWT for me and tell me the algorithm, what claims it contains, when it expires, and what security grade it gets: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyX2FiYzEyMyIsImF1ZCI6Imh0dHBzOi8vYXBpLmV4YW1wbGUuY29tIn0.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c","exampleUseCases":null,"resultDescription":"Returns a JSON object containing the decoded JWT header (algorithm, key ID, token type), decoded payload (issuer, subject, audience, issued-at, expiry, not-before, custom claims), a letter security grade (A–F), numeric score (0–100), boolean expiry and structural validity flags, human-readable expiry string, seconds until expiry, and arrays of findings and security flags.","failureModes":["Missing or malformed token query param returns error","Token with fewer or more than 3 dot-separated segments fails structural validation","Non-JWT strings or empty token values return parsing error","Network or payment failure (x402 USDC micropayment not completed) results in 402 response"],"whenToPreferThis":"Use this endpoint when you need to quickly decode, inspect, and security-grade a JWT without a full auth library — especially useful for debugging tokens in transit, auditing third-party JWTs, or checking expiry and claims in an automated pipeline. Prefer it over manual base64 decoding when you also want a security assessment and structured findings.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T18:30:43.091Z","isFirstParty":false,"canonicalSlug":"netintel-jwt-inspector-decoder-19b7f970"}