JWT Decoder

Agent tools require a browser with WebMCP support. You can use this tool manually.

Decode JSON Web Tokens to inspect their header and payload, with expiry times annotated. Useful for debugging Authelia, Authentik, OIDC, and reverse-proxy auth flows.

# Decoding happens entirely in your browser; the token never leaves your device when used manually. Relative times use the moment you submit the token. This tool does not verify signatures; a decoded token is not a trusted token.