{"uid":"cap_zLU8X1aSvGXqoglvSEjGR","slug":"ipintel-ai-jwt-decode-2627f692","name":"IPIntel.ai JWT Decode","description":"JWT Decode API. Decode JWT header and payload without verifying the signature. Returns algorithm, claims, expiration, issued-at, not-before timestamps, and token validity hints. Useful for agents, developers, authentication debugging, token inspection, API testing, and security workflows. Paid per call via x402.","url":"https://tools.ipintel.ai/jwt-decode","method":"POST","headers":{},"bodySchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","type":"object","properties":{"input":{"type":"object","properties":{"type":{"type":"string","const":"http"},"method":{"type":"string","enum":["POST"]},"bodyType":{"type":"string","enum":["json","form-data","text"]},"body":{"type":"object","additionalProperties":false,"properties":{"token":{"type":"string","description":"JWT token to decode"}},"required":["token"]}},"required":["type","method","bodyType","body"],"additionalProperties":false},"output":{"type":"object","properties":{"type":{"type":"string"},"example":{"type":"object","additionalProperties":true,"properties":{"ok":{"type":"boolean"},"service":{"type":"string"},"valid_format":{"type":"boolean"},"verified_signature":{"type":"boolean"},"warning":{"type":"string"},"algorithm":{"type":"string"},"header":{"type":"object","additionalProperties":true,"properties":{}},"payload":{"type":"object","additionalProperties":true,"properties":{}},"is_expired":{"type":"boolean"},"timestamp":{"type":"string"}}}},"required":["type"]}},"required":["input"]},"responseSchema":{"type":"json","example":{"ok":true,"header":{},"payload":{},"service":"jwt_decode","warning":"This tool decodes JWT header and payload only. It does not verify the signature.","algorithm":"HS256","timestamp":"2026-06-23T00:00:00+00:00","is_expired":false,"valid_format":true,"verified_signature":false}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_D50xwQnV0hADkEIK-2fGk","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Decodes a JWT token's header and payload, reports the algorithm, expiry status, and format validity — without verifying the signature","exampleAgentPrompt":"Can you decode this JWT for me and tell me what's in the header and payload, what algorithm it uses, and whether it's expired? Here's the token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c","exampleUseCases":null,"resultDescription":"Returns a JSON object with the decoded JWT header object, decoded payload object, the signing algorithm (e.g. HS256), whether the token format is valid, whether it is expired, a verified_signature flag (always false — signature is not verified), a warning note about signature non-verification, and a timestamp of when the decode was performed.","failureModes":["Malformed JWT string (not three base64url segments) returns valid_format: false","Missing or empty token input returns an error response","Network or payment failure returns HTTP 402 or 5xx","Token with unsupported encoding may fail to parse payload"],"whenToPreferThis":"Use this endpoint when you need to inspect the contents of a JWT token — its claims, algorithm, and expiry — without needing signature verification. Ideal for debugging, logging, or extracting claims during development or agent workflows where you do not have the signing secret. Prefer this over manual base64 decoding when you also want structured metadata like algorithm name, expiry status, and format validity in a single call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T18:30:11.411Z","isFirstParty":false}