{"uid":"cap_NKrPjpJj25LA1nZQtaSbP","slug":"jwt-inspect-ee7ddc44","name":"JWT Inspect","description":"Decode JWT header and claims and report time validity without verifying the signature.","url":"https://api.agent-payload-tools.workers.dev/jwt-inspect","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"token":{"type":"string","description":"JWT compact serialization to inspect."}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_UAjUWsXrUBoPDnYmfuKCT","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Parses and inspects a JWT compact serialization, returning its decoded header, payload, and metadata without verifying the signature.","exampleAgentPrompt":"Can you inspect this JWT for me and show me what's in the header and payload: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyXzEyMyIsImV4cCI6MTcwMDAwMDAwMH0.abc123","exampleUseCases":[{"title":"Debug expired auth token","prompt":"I've got this JWT from my API response and I want to know when it expires and what the subject is — can you decode it? Token: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyXzQ1NiIsImV4cCI6MTY5OTk5OTk5OX0.sig"},{"title":"Identify JWT signing algorithm","prompt":"What signing algorithm is this JWT using? eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJteWFwcCIsInN1YiI6ImFnZW50XzEifQ.sig — I need to know before I set up verification on my end."},{"title":"Extract claims for audit log","prompt":"Pull out all the claims from this JWT so I can log them for our audit trail: eyJhbGciOiJIUzI1NiJ9.eyJyb2xlIjoiYWRtaW4iLCJ1c2VySWQiOiI3ODkiLCJpYXQiOjE3MDAwMDAwMDB9.xyz"}],"resultDescription":"Returns the decoded JWT broken into its three parts: the header (algorithm, token type), the payload (all claims such as sub, iss, exp, iat, and any custom claims), and structural metadata — all without performing signature verification.","failureModes":["Malformed JWT string that cannot be base64-decoded returns a parse error","Token with fewer or more than three dot-separated segments is rejected","Non-string or empty token field returns a validation error","Network timeout or Cloudflare Worker cold start may cause transient failures"],"whenToPreferThis":"Use this endpoint when you need to quickly read the contents of a JWT — its claims, algorithm, expiry, issuer, or subject — without needing cryptographic signature verification. It is ideal for debugging, logging, auditing, or extracting fields from tokens during agent workflows. Prefer this over a full JWT verification endpoint when you trust the upstream source and only need the data inside the token.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T00:34:12.809Z","isFirstParty":false}