{"uid":"cap_x4oddt8MjumqvaskwMuBu","slug":"jwt-decoder-d872077b","name":"JWT Decoder","description":"Decode JWT: paste a JSON Web Token and get the decoded header, payload claims, human-readable iat/exp/nbf times, expired or not-yet-valid status, seconds until expiry and security warnings such as alg=none. No signature verification, nothing stored. $0.01 per token.","url":"https://intel.rallylive.ca/decode-jwt?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_l8WdLDN83-hpTYWqQWxI_","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Decodes a JSON Web Token and returns the header, payload claims, human-readable timestamps, expiry status, seconds until expiry, and security warnings like alg=none — no signature verification, nothing stored.","exampleAgentPrompt":"Can you decode this JWT for me and tell me what claims are in it, when it expires, and whether there are any security warnings like alg=none? Here's the token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c","exampleUseCases":[{"title":"Debugging expired auth token","prompt":"I've got a JWT that's causing 401 errors in my app — can you decode it and tell me if it's expired, what the exp time is in human-readable form, and whether there are any obvious security issues like alg=none? Token: eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJzdWIiOiJ1c2VyMTIzIiwiZXhwIjoxNjAwMDAwMDAwfQ."},{"title":"Auditing JWT algorithm security","prompt":"Can you inspect this JWT token and let me know what signing algorithm it's using, whether that algorithm is considered insecure, and any other security warnings? eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJyb2xlIjoiYWRtaW4iLCJpYXQiOjE3MDAwMDAwMDB9.abc123"},{"title":"Checking token validity window","prompt":"I need to know if this JWT is currently valid — specifically whether it's not yet active (nbf hasn't passed) or already expired, and how many seconds are left until it expires. Here's the token: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYmYiOjE3MDAwMDAwMDAsImV4cCI6MTk5OTk5OTk5OX0.signature"}],"resultDescription":"Returns the decoded JWT header (including algorithm), all payload claims as a structured object, human-readable versions of iat/exp/nbf timestamps, a boolean or status indicating whether the token is expired or not-yet-valid, seconds remaining until expiry, and any security warnings such as alg=none usage. No signature verification is performed and nothing is persisted.","failureModes":["Malformed or non-base64-encoded token string results in a parse error response","Missing 'input' query parameter causes a 400-style validation error","Token with no exp claim may return null for expiry fields","Network or service unavailability returns a 5xx error","Unsupported JWT format (e.g. JWE encrypted tokens) may return an error or incomplete decode"],"whenToPreferThis":"Choose this endpoint when you need to quickly inspect the contents of a JWT — its claims, timestamps, and algorithm — without needing cryptographic signature verification. Ideal for debugging authentication issues, auditing token security configurations (especially detecting dangerous alg=none), or extracting human-readable expiry information from tokens at $0.01 per call. Not suitable when you require server-side signature verification or need to validate the token's authenticity.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T08:14:59.582Z","isFirstParty":false,"canonicalSlug":"jwt-decoder-d872077b"}