JWT inspector
Decode a token and inspect its header and claims.
Runs in your browser
Decoded claims are untrusted. This tool does not verify signatures or authenticate tokens.
Paste header.payload.signature. Decoding does not verify a token.
OutputText · 0 bytes
Your result will appear hereAdd your input, choose the options and run the tool.
Your input stays on this device. Nothing is uploaded or saved.
About JWT inspector
Decode the header and claims of a JSON Web Token when debugging authentication integrations.
When to use it
Inspect issuer, subject, and expiry claims while debugging a test authentication flow.
JWT structure:
base64url(header).base64url(claims).signature
Decoded claims are untrusted until verified.How to use it
- Paste a three-part JWT.
- Choose Inspect token.
- Read the decoded JSON header and claims.
Limits & privacy
Signatures, expiry, issuer, and audience are not verified. Decoded claims are untrusted. The token remains on your device.
Use this tool from the API reference or connect through the SDK, CLI, SSH, or MCP. Hosted calls share your plan allowances.