@mukundakatta/jwt-mcp
v0.1.1
Published
MCP server: decode JWT to inspect header and claims (no verification).
Maintainers
Readme
jwt-mcp
MCP server: decode a JWT to inspect its header and claims. No verification. This is for debugging — never use the decoded body for auth decisions.
Tool: decode
{ "token": "eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjMifQ.signature" }→
{
"header": { "alg": "HS256" },
"payload": { "sub": "123" },
"signature": "signature",
"expired": null
}expired is true/false if the payload has an exp claim, otherwise null.
MIT.
