JWT decoder

Paste a JSON Web Token, read the claims, and verify the signature in the browser.

Runs in browser

Use from your agent

Streamable HTTP at https://benchline.fabwaseem.com/mcp. No key. The tool name is decode_jwt.

mcp.jsonjson
1{
2 "mcpServers": {
3 "benchline": {
4 "url": "https://benchline.fabwaseem.com/mcp"
5 }
6 }
7}
tools/calljson
1{
2 "jsonrpc": "2.0",
3 "id": 1,
4 "method": "tools/call",
5 "params": {
6 "name": "decode_jwt",
7 "arguments": {
8 "token": "eyJhbGciOiJub25lIn0.eyJzdWIiOiJhZGEifQ."
9 }
10 }
11}

How it works

Decode a JWT and verify HS, RS, PS, ES, and EdDSA signatures in the browser. The token and keys are not uploaded.

  1. 01

    Paste the token

    Copy a JWT from an Authorization header, a cookie, or a session. A Bearer prefix is stripped.

  2. 02

    Add the secret or public key

    HS256, HS384, and HS512 use a shared secret. RS, PS, ES, and EdDSA use a public key as PEM, a JWK, or a JWKS document.

  3. 03

    Read the checks

    A verified badge means the signature matches. exp, nbf, and iat are shown as a relative phrase and a UTC time.

FAQ