Jwt Decode MCP tool

MCP findutils:jwt_decode

Decode a JWT header + payload. Does NOT verify the signature. Related API tools: jwt_generator signs HMAC (HS256/384/512) test tokens and jwt_security_validator checks algorithm and time claims. Signature verification (HS256/384/512 and RS256) and RS256 signing run only in the browser on the JWT Decoder page (https://findutils.com/developers/jwt-decoder/), so secrets and private keys are never sent to this API.

Open the tool Try it

Arguments

application/json

token

string required

JWT token (3 dot-separated base64url segments).

Example arguments

Verified

{
  "token": "eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ4In0.sig"
}

claude mcp add findutils --transport http https://mcp.findutils.com/

{
  "mcpServers": {
    "findutils": {
      "url": "https://mcp.findutils.com/"
    }
  }
}

curl -X POST https://mcp.findutils.com/ \
  -H "Content-Type: application/json" \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "tools/call",
    "params": {
      "name": "jwt_decode",
      "arguments": {
        "token": "eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ4In0.sig"
      }
    }
  }'

Also a REST endpoint

The same tool answers plain HTTP at POST /api/tools/jwt-decode/execute.

REST reference

Rate limit: 120 a minute, per IP
Auth: None
REST id: jwt-decode
MCP name: jwt_decode
Category: Developer
Machine-readable: openapi.json · markdown.md

Arguments

Example arguments

More Developer tools

More to explore