Security
Decode JWT header and payload, verify HS256 or RS256 signatures, and flag algorithm, expiry, and sensitive-claim security risks
Call this tool from your code in three languages.
curl -X POST 'https://api.elysiatools.com/en/api/tools/jwt-decoder-security-auditor' \
-H 'Content-Type: application/json' \
-d '{"jwtToken":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjMiLCJyb2xlIjoidXNlciIsImVtYWlsIjoidXNlckBleGFtcGxlLmNvbSIsImV4cCI6MjAwMDAwMDAwMH0.0jVQ4ZJ1vF6K_6n0Xm2jtfwIY3PrM6t5Z2iB4Wn7s0w","hmacSecret":"super-secret-demo-key","rsaPublicKey":"-----BEGIN PUBLIC KEY-----"}'Send a POST request with your inputs as JSON. File parameters require a separate upload first.
POST https://api.elysiatools.com/en/api/tools/jwt-decoder-security-auditor| Name | Type | Required | Description |
|---|---|---|---|
| jwtToken | textarea | No | — |
| hmacSecret | text | No | — |
| rsaPublicKey | textarea | No | — |
HTML result
{
"result": "<div>Processed HTML content</div>",
"error": "Error message (optional)",
"message": "Notification message (optional)",
"metadata": {
"key": "value"
}
}Add this tool to your Model Context Protocol server so AI agents can list and call it.
Add this block to your MCP client configuration:
{
"mcpServers": {
"elysiatools-jwt-decoder-security-auditor": {
"name": "jwt-decoder-security-auditor",
"description": "Decode JWT header and payload, verify HS256 or RS256 signatures, and flag algorithm, expiry, and sensitive-claim security risks",
"baseUrl": "https://api.elysiatools.com/mcp/sse?toolId=jwt-decoder-security-auditor",
"command": "",
"args": [],
"env": {},
"isActive": true,
"type": "sse"
}
}
}After connecting to the SSE endpoint, list the exposed tools:
{
"jsonrpc": "2.0",
"id": 1,
"method": "tools/list"
}Invoke the tool by its id, passing arguments built from its parameters:
{
"jsonrpc": "2.0",
"id": 2,
"method": "tools/call",
"params": {
"name": "jwt-decoder-security-auditor",
"arguments": {
"jwtToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjMiLCJyb2xlIjoidXNlciIsImVtYWlsIjoidXNlckBleGFtcGxlLmNvbSIsImV4cCI6MjAwMDAwMDAwMH0.0jVQ4ZJ1vF6K_6n0Xm2jtfwIY3PrM6t5Z2iB4Wn7s0w",
"hmacSecret": "super-secret-demo-key",
"rsaPublicKey": "-----BEGIN PUBLIC KEY-----"
}
}
}Questions or issues? Contact [email protected]