{"uid":"cap_eb7todn9EZQIgZh3Wa_Pa","slug":"strale-jwt-decode-c54e5a28","name":"Strale JWT Decode","description":"The trust layer for AI agents — 250+ independently tested data capabilities across 27 countries. Execute capabilities via REST, MCP, A2A, or x402 micropayments. Every call returns an audit record with cryptographic chain hashing.","url":"https://api.strale.io/x402/v2/jwt-decode","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","required":["token"],"properties":{"token":{"type":"string"}}}},"additionalProperties":false}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.0216","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.0216/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0216","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0216","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_m51OYi5s-KaWkDqyThgWE","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.0216","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Decodes and inspects a JWT token, returning its header, payload claims, and signature metadata without requiring a secret key.","exampleAgentPrompt":"Can you decode this JWT for me and show me what claims it contains, including who issued it and when it expires? Here's the token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyXzEyMyIsImV4cCI6MTcwMDAwMDAwMH0.abc123","exampleUseCases":[{"title":"Debug expired auth token","prompt":"I've got this JWT from our API response and I think it might be expired — can you decode it and tell me when it expires and what the sub and iss claims say? Token: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyXzQ1NiIsImlzcyI6ImF1dGgubXlhcHAuY29tIiwiZXhwIjoxNjAwMDAwMDAwfQ.sig"},{"title":"Inspect third-party token claims","prompt":"We received a JWT from a vendor integration and I need to know what permissions and roles are embedded in the payload — can you decode it and list all the claims? Here's the token: eyJhbGciOiJIUzI1NiJ9.eyJyb2xlIjoiYWRtaW4iLCJwZXJtaXNzaW9ucyI6WyJyZWFkIiwid3JpdGUiXX0.xyz"},{"title":"Audit token issued to user","prompt":"For our security audit, I need to decode this JWT from our login system and extract the user ID, issued-at time, and any custom claims it carries: eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiJ1c2VyXzc4OSIsImlhdCI6MTY5MDAwMDAwMH0.sig99"}],"resultDescription":"Returns the decoded JWT header (algorithm, token type), payload (all embedded claims such as sub, iss, iat, exp, and any custom fields), and metadata about the token structure. Also includes an audit record with a cryptographic chain hash per the Strale trust layer.","failureModes":["Malformed or non-JWT string returns an error indicating invalid token format","Missing 'token' query parameter results in a validation error","Expired token is decoded successfully but expiration is flagged in the payload — this endpoint does not validate signatures, so expiry enforcement must be done by the caller","Network errors or service unavailability return 5xx responses"],"whenToPreferThis":"Choose this endpoint when you need to inspect or debug the contents of a JWT token without needing signature verification, and when you want an auditable, cryptographically logged record of the decode operation. Useful in regulated or compliance-sensitive pipelines where every data operation must be traceable.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T18:55:41.923Z","isFirstParty":false}