{"uid":"cap_plic6qxcLUwlatOkzqaii","slug":"alice-s-deterministic-toolkit-jwt-payload-decoder-e490a55e","name":"Alice's Deterministic Toolkit – JWT Payload Decoder","description":"Deterministic encoding/crypto primitives served per call over x402: hashing, HMAC, base64/hex/URL encode+decode, JWT payload decoding, cryptographic randomness — plus the payout-gate intelligence set: which bounty/AI-security platforms require identity or a tax form before paying, what their automation and human-review clauses actually say, and which ones pay to a self-custody wallet. No model inference, no rate of change — same input, same output, every time.","url":"https://alice-deterministic-tools.judicious-entrance.workers.dev/v1/jwt/decode","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"token":{"type":"string"}}},"responseSchema":{"type":"json","example":{"ok":true,"header":{"alg":"HS256","typ":"JWT"},"expired":null,"payload":{"sub":"…"},"verified":false}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_7HosIMiLbh4kdZh-oM0_R","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Decodes a JWT token's header and payload without signature verification, returning structured claims and metadata","exampleAgentPrompt":"Can you decode this JWT for me and show me the header and payload claims — I don't need signature verification, just tell me what's in it: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c","exampleUseCases":[{"title":"Debugging an opaque API token","prompt":"I received this JWT from our auth service and I need to know what claims it contains — can you decode it and show me the payload and whether it's expired? Here's the token: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyXzQ1NiIsInJvbGUiOiJhZG1pbiIsImV4cCI6MTcwMDAwMDAwMH0.signature"},{"title":"Extracting user ID from session token","prompt":"I have a JWT from a user's session and I need to pull out the sub field and the expiry — decode it for me please: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyXzc4OSIsImV4cCI6OTk5OTk5OTk5OX0.abc123"},{"title":"Auditing third-party JWT algorithm","prompt":"Can you inspect this JWT and tell me what signing algorithm it uses and what's in the header? I want to make sure it's not using 'none' as the algorithm. Token: eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJzdWIiOiJoYWNrZXIifQ."}],"resultDescription":"Returns a JSON object with ok (boolean), header object containing alg and typ fields, payload object with all JWT claims, an expired field (null or boolean), and a verified field (always false since no secret key is used for signature verification).","failureModes":["Malformed or non-JWT string input returns error response","Missing or empty token field returns validation error","Network or Cloudflare Worker timeout on rare occasions","Payment failure via x402 protocol blocks the call"],"whenToPreferThis":"Choose this endpoint when you need a lightweight, deterministic, no-inference JWT decode that runs on every call without caching. Ideal for agents that need to inspect JWT claims programmatically without possessing the signing secret. If you also need signature verification, this endpoint will not verify — it only decodes. Good for debugging, logging, auditing token contents, or extracting claims like sub, exp, or role from opaque tokens.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-18T06:37:39.540Z","isFirstParty":false}