Data Migration Tools Agent
Hire Experts

Docs

JWT Decoder

Decode a JWT header and payload, optionally verify HS256.

← All docs · Open the tool →

Overview

Decodes JWT header and payload, describes registered claims, reports expiry, and optionally verifies HS256.

Features

  • Header/payload decode.
  • Registered claim descriptions.
  • Expiry status.
  • Optional HS256 verify.

Use cases

  • Inspecting a token.
  • Verifying a signature in a test.

Notes

  • RS256/JWKS is not implemented. Only HS256 is supported.

API reference

POST /api/v1/tools/jwt-decode

Decode a JWT header and payload, describe registered claims, and report expiry status. Optionally verify an HS256 signature.

Returns: The decoded header and payload, registered-claim descriptions, expiry status, and (when verified) the signature check result.

Parameters

NameTypeRequiredDefaultDescription
token string Yes — The JWT (three Base64URL segments separated by dots).
verify.secret string No — Shared secret for HS256 signature verification. Omit to skip verification.

Example

curl -X POST https://data-migration-tools.com/api/v1/tools/jwt-decode \
  -H "Content-Type: application/json" \
  -d '{"token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkFkYSIsImlhdCI6MTUxNjIzOTAyMn0.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"}'

See the full API reference for all examples and error codes.