JWT Decoder API

Decode a JWT's header and payload. Does not verify the signature.

POST /api/v1/tools/jwt-decoderMCP jwt_decoderDeveloper Tools

Decode a JSON Web Token to read its header and payload, with exp, iat and nbf shown as dates and an expiry check. Runs in your browser; signatures are not verified.

Input

Send these as a JSON object. Unknown fields are rejected.

token: The JWT. (string, required)

Try it in the browser JSON Schema Get an API key

curl https://pithlab.com/api/v1/tools/jwt-decoder \n  -H "Authorization: Bearer $PITHLAB_KEY" \n  -H "Content-Type: application/json" \n  -d '{"token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkFkYSIsImlhdCI6MTcwMDAwMDAwMH0.signature"}'

Example response

{
  "ok": true,
  "result": {
    "header": {
      "alg": "HS256",
      "typ": "JWT"
    },
    "payload": {
      "sub": "1234567890",
      "name": "Ada",
      "iat": 1700000000
    }
  }
}