{"uid":"cap_9gbak9Wfgj_bzgW2Cec1h","slug":"agenttools-jwt-decoder-c03d6ec2","name":"AgentTools JWT Decoder","description":"Decode a JSON Web Token's header and payload to readable JSON. Pure decoding: signatures are NOT verified and no secret is needed. Accepts standard and URL-safe base64 with or without padding; claims like exp and iat are rendered as dates. Use this when an agent needs to decode header and payload — no verification.","url":"https://agentstoolshub.com/api/v1/dev/jwt-decoder?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["token"],"properties":{"token":{"type":"string","description":"header.payload.signature"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_W3p75CYdJz6B6q2JhN6pG","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Decodes a JWT's header and payload into readable JSON without verifying the signature — exp and iat claims are rendered as human-readable dates.","exampleAgentPrompt":"Can you decode this JWT for me so I can see what's in the header and payload — eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c — I don't need signature verification, just want to read the contents.","exampleUseCases":[{"title":"Debug expired auth token","prompt":"I have this JWT from our auth service and I want to check if it's expired and what the exp and iat dates are — can you decode it? Token: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyXzEyMyIsImV4cCI6MTcwMDAwMDAwMCwiaWF0IjoxNjk5OTkwMDAwfQ.signature"},{"title":"Inspect role claims in JWT","prompt":"What roles and permissions are encoded in this JWT payload? Just decode it without verifying the signature — eyJhbGciOiJIUzI1NiJ9.eyJyb2xlIjoiYWRtaW4iLCJzdWIiOiJ1c2VyXzQ1NiIsIm9yZyI6ImFjbWUifQ.sig"},{"title":"Read third-party token contents","prompt":"We received this JWT from a third-party OAuth provider and I need to see what claims are inside — issuer, subject, audience — without needing the secret key. Can you decode it?"}],"resultDescription":"Returns a JSON object with two keys: the decoded header (algorithm, token type, etc.) and decoded payload (all claims, with exp and iat rendered as human-readable date strings). No signature verification is performed and no secret is required.","failureModes":["Malformed or non-JWT string returns a parsing error","Missing 'token' query parameter returns a 400 or validation error","A token with fewer than two base64 segments (header.payload) may fail to decode","Non-standard encoding variants that fall outside standard or URL-safe base64 may cause errors"],"whenToPreferThis":"Use this endpoint when you need to quickly inspect the contents of a JWT for debugging, logging, or informational purposes without access to the signing secret. It is ideal for development workflows, token introspection in read-only pipelines, or when you only care about the claims rather than authenticity. Do NOT use this when cryptographic signature verification is required for security-sensitive decisions.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T12:50:31.206Z","isFirstParty":false,"canonicalSlug":"agenttools-jwt-decoder-c03d6ec2"}