80trust / 100
Jwt Decode
by Tanod utilpeek in Onchain & crypto
x402 APIPassing, checked 3 h ago
utilpeek (Tanod) JWT decoder: header, payload and claim times of a token, not verified. Use when an agent must read a JWT's header and claims (exp, aud, kid) without verifying it.
POST https://tanod.dev/v1/jwt/decode
Last 30 days
All checks passedSome failedAll failedNot checked
- Uptime
- 100%
- Response time
- 274 ms typical, 849 ms slowest 5%
- Last check
- 3 h ago
- Next check
- any minute now
How to call it
# bash or zsh: see the payment challenge (nothing is charged)
curl -g -i -X POST 'https://tanod.dev/v1/jwt/decode' \
-H 'content-type: application/json' \
--data-raw '{"token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwiZXhwIjoxNzk5OTk5OTk5fQ.c2ln"}'import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";
const client = new x402Client().register(
"eip155:8453",
new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);
// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Ftanod.dev%2Fv1%2Fjwt%2Fdecode
const res = await pay("https://tanod.dev/v1/jwt/decode", {
method: "POST",
headers: { "content-type": "application/json" },
body: "{\"token\":\"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwiZXhwIjoxNzk5OTk5OTk5fQ.c2ln\"}",
});
console.log(await res.json());Example input
{
"token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwiZXhwIjoxNzk5OTk5OTk5fQ.c2ln"
}Example output
{
"alg": "HS256",
"claims": {
"exp": "2027-01-15T08:26:39Z",
"expired": false,
"expires_in_seconds": 7776000,
"not_yet_valid": false,
"sub": "1234567890"
},
"has_signature": true,
"header": {
"alg": "HS256",
"typ": "JWT"
},
"kid": null,
"note": "Decoded only: the signature was NOT verified, so none of these claims is trustworthy until /v1/jwt/verify (or your own check) passes. Times are compared with the server clock.",
"payload": {
"exp": 1799999999,
"sub": "1234567890"
},
"server_time": "2026-10-10T00:00:00Z",
"signature_bytes": 32,
"typ": "JWT",
"verified": false
}Security scan
- No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.
Recent checks
| When | Result | HTTP | Time | Price |
|---|---|---|---|---|
| 3 h ago | Passed | 402 | 263 ms | $0.001 |
| 7 h ago | Passed | 402 | 262 ms | $0.001 |
| 10 h ago | Passed | 402 | 935 ms | $0.001 |
| 14 h ago | Passed | 402 | 372 ms | $0.001 |
| 18 h ago | Passed | 402 | 743 ms | $0.001 |
| 22 h ago | Passed | 402 | 725 ms | $0.001 |
| 25 h ago | Passed | 402 | 269 ms | $0.001 |
| 29 h ago | Passed | 402 | 265 ms | $0.001 |
| 33 h ago | Passed | 402 | 338 ms | $0.001 |
| 36 h ago | Passed | 402 | 605 ms | $0.001 |
| 40 h ago | Passed | 402 | 849 ms | $0.001 |
| 43 h ago | Passed | 402 | 271 ms | $0.001 |
| 2 days ago | Passed | 402 | 373 ms | $0.001 |
| 2 days ago | Passed | 402 | 274 ms | $0.001 |
| 2 days ago | Passed | 402 | 264 ms | $0.001 |