{"uid":"cap_qOHBDr25PBn_KqiC-NkKw","slug":"signaldesk-ai-jwt-decode-9a6b4078","name":"SignalDesk AI JWT Decode","description":"Evidence-backed autonomous AI jobs and paid data tools. Queue/D1/cron run outside the chat; free quotas and bounded execution apply.","url":"https://x402-agent.kariguetoazul.workers.dev/api/encoding/jwt-decode?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"token":{"type":"string","maxLength":4096,"description":"JWT token. Avoid sharing confidential credentials."}}},"responseSchema":{"type":"json","example":{"header":{"alg":"HS256","typ":"JWT"},"payload":{"sub":"123"},"warning":"Decoded claims are untrusted; do not use this result for authentication.","signature_verified":false}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_9bwjUwYZKTalQo8e9HecG","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Decodes a JWT token into its header, payload, and signature components without verifying the signature","exampleAgentPrompt":"Can you decode this JWT for me and show me what's in the header and payload? Here's the token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjMiLCJpYXQiOjE2MDAwMDAwMDB9.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c","exampleUseCases":[{"title":"Debug expired auth token","prompt":"I'm getting a 401 error and I want to know what claims are in this JWT — can you decode it and tell me the expiry and subject? Token: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyXzQ1NiIsImV4cCI6MTY5MDAwMDAwMH0.abc123"},{"title":"Inspect third-party token structure","prompt":"We received this JWT from a partner API and I need to know what algorithm it uses and what fields are in the payload before we integrate it — can you decode it? eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJwYXJ0bmVyLmNvbSIsInJvbGUiOiJhZG1pbiJ9.xyz789"},{"title":"Audit JWT claims in CI pipeline","prompt":"During our security audit I need to check that this access token contains the right 'aud' and 'scope' claims — decode it so I can verify the fields: eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJteWFwcCIsInNjb3BlIjoicmVhZDp3cml0ZSJ9.defghi"}],"resultDescription":"Returns a JSON object with three top-level keys: 'header' (containing alg, typ, and other header fields), 'payload' (containing all JWT claims such as sub, iat, exp, iss, aud, etc.), and 'signature_verified' (always false — this endpoint does not verify the signature). A 'warning' field is included reminding callers not to trust decoded claims for authentication purposes.","failureModes":["Malformed JWT string (not three base64url segments) returns a parse error","Token exceeding 4096 characters may be rejected","Network/worker timeout if the Cloudflare Worker is cold-starting","Missing or empty 'token' field returns a validation error","Non-JWT strings (e.g. opaque tokens) will fail to parse"],"whenToPreferThis":"Use this endpoint when you need to inspect or debug JWT token contents without performing signature verification — for example, reading expiry times, extracting claims for logging, auditing token structure, or understanding a third-party token format. Prefer this over a full JWT verification library when you explicitly do NOT need cryptographic validation and just want the decoded payload quickly. Not suitable when you need to authenticate a user or trust the claims for access control decisions.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-13T00:42:08.926Z","isFirstParty":false,"canonicalSlug":"signaldesk-ai-jwt-decode-9a6b4078"}