{"uid":"cap_A0yT7K7cdyocXfzrIwoh0","slug":"bot-bazaar-jwt-claims-linter-4768be33","name":"Bot Bazaar JWT Claims Linter","description":"Validate JWT signing algorithm (EdDSA/ES256 vs alg:none), issuer/subject presence, and short-lived expiration window.","url":"https://bot-bazaar.fly.dev/v1/x402/jwt-claims-lint?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","properties":{"alg":{"type":"string","description":"JWT header alg value"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_KT1j2XYa0HZsbpjXjLrW7","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Validates a JWT's signing algorithm (EdDSA/ES256 vs alg:none), checks issuer/subject presence, and verifies the token uses a short-lived expiration window.","exampleAgentPrompt":"Can you lint this JWT's claims — specifically check whether the alg field is using EdDSA or ES256 (not alg:none), and confirm the token has issuer and subject fields and a short-lived expiration?","exampleUseCases":[{"title":"Detecting insecure alg:none tokens","prompt":"I have a JWT coming in from an agent and I want to make sure it's not using alg:none — can you check the algorithm and flag any security issues with the claims?"},{"title":"x402 payment token security audit","prompt":"Before accepting this x402 payment JWT, can you lint it to verify it uses EdDSA or ES256, has issuer and subject set, and the expiration window is tight enough to prevent replay attacks?"},{"title":"Pre-deployment JWT policy check","prompt":"We're building an agent-to-agent API and want to validate that our JWTs comply with best practices — can you check the alg is EdDSA or ES256, the iss and sub claims are present, and the exp is short-lived?"}],"resultDescription":"Returns a lint report indicating whether the JWT's signing algorithm is an accepted secure value (EdDSA or ES256) versus a disallowed value like alg:none, whether the issuer and subject claims are present, and whether the token expiration window qualifies as short-lived — along with any warnings or errors found.","failureModes":["Missing or malformed alg query parameter returns a validation error","Algorithm value that is neither EdDSA, ES256, nor alg:none may produce unexpected results","Service unavailability on fly.dev returns 5xx error","Payment not fulfilled returns 402 Payment Required"],"whenToPreferThis":"Use this endpoint when you need a lightweight, focused security lint specifically for JWT algorithm safety (alg:none detection), claim completeness (iss/sub), and expiration hygiene in x402 or agent-to-agent contexts — without needing a full JWT decode or signature verification service.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-30T19:07:14.250Z","isFirstParty":false,"canonicalSlug":"bot-bazaar-jwt-claims-linter-4768be33"}