{"uid":"cap_YuaDgUfHxQGKWpPV56usa","slug":"jwt-decoder-with-timing-analysis-6adfeb2b","name":"JWT Decoder with Timing Analysis","description":"Decode a JWT — header, payload, and timing analysis (issued/not-before/expiry as ISO timestamps, expired flag, seconds until expiry). Decode only; signature is NOT verified.","url":"https://toolbelt402.tpoborne.workers.dev/jwt/decode","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"token":{"type":"string","description":"JWS compact JWT (max 16 KB). Decode only — signature is NOT verified."}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_qu358kjSPrU-D6BRWTiIr","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Decodes a JWT into its header and payload components, and performs timing analysis including issued-at, not-before, and expiry as ISO timestamps, expired flag, and seconds until expiry — without verifying the signature.","exampleAgentPrompt":"Can you decode this JWT for me and tell me what's in the payload, when it was issued, and whether it's already expired? Here's the token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c","exampleUseCases":[{"title":"Debug expired auth token in production","prompt":"I've got a JWT from our production API and I think it might be expired — can you decode it and tell me the exact expiry timestamp and how many seconds ago it expired? Token: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyXzEyMyIsImV4cCI6MTcwMDAwMDAwMH0.signature"},{"title":"Inspect third-party token claims","prompt":"Decode this JWT I got back from a third-party OAuth provider and show me all the claims in the payload — I want to see the subject, any roles or scopes, and the issued-at and not-before times as readable ISO timestamps."},{"title":"Monitor token lifetime in automation pipeline","prompt":"In my automation pipeline I'm passing around this JWT: eyJhbGciOiJIUzI1NiJ9.eyJleHAiOjE3MjAwMDAwMDB9.sig — can you decode it and tell me exactly how many seconds it has left before it expires so I can decide whether to refresh it?"}],"resultDescription":"Returns the decoded JWT header object (e.g. algorithm, token type), the decoded payload object with all claims, and timing analysis including issued-at (iat), not-before (nbf), and expiration (exp) as human-readable ISO 8601 timestamps, a boolean expired flag, and the number of seconds remaining until expiry (negative if already expired). Signature is NOT verified.","failureModes":["Malformed or non-JWT string returns a parse error","Token with no exp claim will have null/absent expiry and seconds-until-expiry fields","Very old or already-expired tokens decode successfully but return expired: true and negative seconds-until-expiry","Base64 padding errors in the token string may cause decode failure"],"whenToPreferThis":"Choose this endpoint when you need to quickly inspect the contents of a JWT token — its claims, algorithm, and timing metadata — without performing cryptographic signature verification. Ideal for debugging, monitoring token lifetimes, logging, or extracting user/session claims in a trusted internal pipeline where signature validation has already been handled upstream.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T18:47:57.394Z","isFirstParty":false}