{"uid":"cap_E5PZUKp1wNI2DscYTMyPF","slug":"jwt-decoder-4cd9fc38","name":"JWT Decoder","description":"Decode a JSON Web Token without verifying it: header, algorithm, payload claims, issued-at/expiry times and whether it has expired. Use to debug auth tokens and API sessions.","url":"https://bess-x402.onrender.com/v1/util/jwt-decode?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","required":["token"],"properties":{"token":{"type":"string","description":"The JWT"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_1az_8CEj-ncqy1Fwsz8Yf","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Decodes a JSON Web Token (without verification) to extract header, algorithm, payload claims, issued-at/expiry times, and expiration status.","exampleAgentPrompt":"Can you decode this JWT for me and tell me what claims are in it, what algorithm it uses, and whether it's expired: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c?","exampleUseCases":[{"title":"Debug expired API session token","prompt":"I'm getting 401 errors from an API and want to check if my token has expired — can you decode this JWT and tell me the expiry time and whether it's still valid: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyXzEyMyIsImV4cCI6MTcwMDAwMDAwMH0.signature"},{"title":"Inspect auth token claims in CI pipeline","prompt":"During our CI build, we generate an auth token and I need to verify it contains the right user ID and roles — can you decode this JWT and show me all the payload claims: eyJhbGciOiJIUzI1NiJ9.eyJ1c2VySWQiOiJhYmMxMjMiLCJyb2xlIjoiYWRtaW4ifQ.sig"},{"title":"Check JWT algorithm used by third-party service","prompt":"We're auditing a third-party integration and need to know what signing algorithm their tokens use — please decode this JWT and show me the header and algorithm: eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJ0aGlyZHBhcnR5LmNvbSJ9.sig"}],"resultDescription":"Returns the decoded JWT header (including algorithm), full payload claims, issued-at and expiry timestamps in human-readable form, and a boolean indicating whether the token has already expired. No cryptographic signature verification is performed.","failureModes":["Malformed or non-JWT string input returns a parse error","Missing 'token' query parameter results in a 400 bad request","Tokens with non-standard encoding may fail to parse","Network or server errors on the hosted Render instance may cause timeouts"],"whenToPreferThis":"Use this endpoint when you need to quickly inspect JWT contents for debugging purposes — reading claims, checking expiry, or identifying the algorithm — without needing to verify the signature. Ideal for developer tooling, CI pipelines, and auth debugging workflows. Prefer this over writing custom base64 decode logic or using a local library when operating in an agentic context.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-30T07:10:32.322Z","isFirstParty":false,"canonicalSlug":"jwt-decoder-4cd9fc38"}