{"uid":"cap_T9jrkGUks02OoROhyAXJO","slug":"agent402-uk-jwt-decoder-7c474065","name":"Agent402 UK JWT Decoder","description":"Don't burn tokens on deterministic work. Go/no-go jobs first: payout preflight, text firewall (PII/secrets), budget check — then rails, calendars, finmath. x402 USDC on Base. UK + global. agent402.co.uk — not agent402.tools. $0.001–$0.002 USDC on Base. No API keys.","url":"https://agent402.co.uk/v1/utils/jwt/decode","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"token":{"type":"string","description":"JWT string"}}},"responseSchema":{"type":"json","example":{"valid":true,"payload":{"sub":"1234567890"},"signature_present":false}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"down","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_gZ157QQZ6Jeaw1HaWWnuo","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Decodes a JWT token's header and payload without verifying the signature, for debugging OIDC and agent tokens mid-task.","exampleAgentPrompt":"Can you decode this JWT for me so I can see what's in the header and payload — I don't need signature verification, just want to inspect the claims: eyJhbGciOiJSUzI1NiIsImtpZCI6ImFiYyJ9.eyJzdWIiOiJ1c2VyXzEyMyIsImV4cCI6MTcwMDAwMDAwMH0.signature","exampleUseCases":[{"title":"Debugging OIDC token mid-workflow","prompt":"I'm getting an auth error in my pipeline and I want to see what's actually inside this OIDC access token — can you decode it and show me the sub, iss, and exp claims without needing the signing key? Token: eyJhbGciOiJSUzI1NiJ9.eyJzdWIiOiJ1c2VyXzQ1NiIsImlzcyI6Imh0dHBzOi8vYXV0aC5leGFtcGxlLmNvbSIsImV4cCI6MTcwMDAwMDAwMH0.sig"},{"title":"Inspecting agent-issued JWT claims","prompt":"My AI agent received this bearer token from a downstream service and I need to check which permissions are encoded in it before proceeding — decode the payload for me: eyJhbGciOiJFUzI1NiJ9.eyJzY29wZXMiOlsicmVhZCIsIndyaXRlIl0sInN1YiI6ImFnZW50XzEifQ.sig"},{"title":"Checking JWT expiry without a secret","prompt":"Can you quickly pull apart this JWT and tell me when it expires and what the algorithm in the header is? I don't have the secret so I just need the decoded fields, not verification: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MDAwMDAwMDAsInN1YiI6InRlc3QifQ.sig"}],"resultDescription":"Returns a JSON object containing the decoded JWT header and payload as key-value maps, a flag indicating whether a signature component is present, and a validity field. Does not verify the signature cryptographically — treats the token as untrusted data for inspection only.","failureModes":["Malformed or non-JWT string input causes a parse error response","Token with missing segments (not three dot-separated parts) will fail to decode","Network or payment (x402) errors may prevent the call from completing","Empty token field returns an error, not a decoded result"],"whenToPreferThis":"Use this endpoint when an AI agent needs to inspect JWT claims mid-task without access to the signing key or secret, purely for debugging or routing decisions. Prefer this over full JWT verification endpoints when you explicitly do not need (or cannot perform) signature validation — for example, inspecting an OIDC token's sub, exp, or scopes to decide next steps in a workflow. Do not use this for security-sensitive authentication decisions, as signature verification is not performed.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T06:36:35.933Z","isFirstParty":false}