{"uid":"cap_A2hRMF7kZaTmVbg1g7Vym","slug":"kevaremesh-jwt-inspect-8b284857","name":"KEVAREMESH JWT Inspect","description":"Buyer-first MCP procurement gateway that discovers, compares and routes live x402 APIs without making the buyer choose a provider.","url":"https://kevaremesh-web.vercel.app/api/x402/jwt-inspect?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"token":{"type":"string","maxLength":32768}}},"responseSchema":{"type":"json","example":{"result":{"type":"JWT","header":{"alg":"RS256","typ":"JWT"},"key_id":null,"payload":{"exp":1893456000,"sub":"123"},"warnings":["Signature is not verified; decoded claims are untrusted."],"algorithm":"RS256","time_claims":{"exp":1893456000,"iat":null,"nbf":null,"expired":false,"issued_in_future":null,"not_before_satisfied":null},"now_epoch_seconds":1780000000,"signature_present":true,"signature_verified":false},"product":"kevaremesh_jwt_inspect_v2","service":"KEVAREMESH","tool_name":"kevaremesh_jwt_inspect","limitations":["Signature is not verified","Compact three-part JWT/JWS only"],"generated_at":"2026-09-18T00:00:00.000Z"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_tlqRld1JcOlKq3mKDtGOW","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Decodes and inspects a JWT token, extracting header, payload, and time claims without verifying the signature.","exampleAgentPrompt":"Can you decode this JWT and tell me what's in the header and payload, and whether it's expired? Here's the token: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjMiLCJleHAiOjE4OTM0NTYwMDB9.signature","exampleUseCases":[{"title":"Debugging expired auth token","prompt":"I've got a JWT that's failing authentication — can you decode it and tell me its expiration time, issue time, and whether it's actually expired right now?"},{"title":"Auditing JWT algorithm in use","prompt":"Can you inspect this JWT and tell me what signing algorithm and key ID it's using? I need to verify it's RS256 before I trust it. Token: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyMTIzIn0.sig"},{"title":"Extracting user subject from token","prompt":"Parse this JWT for me and pull out the 'sub' field and any other identity claims in the payload — I just need to know what user this token belongs to without full signature validation."}],"resultDescription":"Returns a structured JSON object containing the decoded JWT type, header fields (alg, typ), key_id, full payload claims, time claims (exp, iat, nbf) with human-readable expiry status, whether a signature is present and whether it was verified, warnings about unverified claims, and metadata about the service and tool version.","failureModes":["Malformed or non-compact JWT (not three dot-separated base64 parts) returns an error","Token string exceeding 32768 characters may be rejected","Signature is never cryptographically verified — warnings are always included about untrusted claims","Missing or empty token field causes a validation error","Non-JWT strings (e.g. opaque tokens) will fail to parse"],"whenToPreferThis":"Choose this endpoint when you need to quickly decode and inspect a JWT's structure, claims, or time validity without requiring cryptographic signature verification. Ideal for debugging, logging, auditing token metadata, or extracting payload fields in agent workflows where the signing key is not available. Not suitable when full signature verification against a known public key is required for security-critical decisions.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T01:07:03.147Z","isFirstParty":false,"canonicalSlug":"kevaremesh-jwt-inspect-8b284857"}