apiverve/jwtdecoder

JWT Decoder decodes JWT tokens to reveal header and payload information without performing signature verification.

dev-main 2026-07-16 20:38 UTC

Requires

• php: >=7.4
• guzzlehttp/guzzle: ^7.0

Requires (Dev)

• phpunit/phpunit: ^9.0

MIT

• APIVerve

• api
• Authentication Token
• apiverve
• jwtdecoder
• jwt decoder
• token decoder
• jwt parser
• decode jwt

Published on Packagist.org on 2026-07-16 20:55 UTC

README

JWT Decoder decodes JWT tokens to reveal header and payload information without performing signature verification.

The JWT Decoder API provides a simple, reliable way to integrate jwt decoder functionality into your applications. Built for developers who need production-ready jwt decoder capabilities without the complexity of building from scratch.

View API Details →

Available on:

Quick Start

Using JavaScript

async function callJWTDecoderAPI() {
    try {
        const requestBody = {
    "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"
};

        const response = await fetch('https://api.apiverve.com/v1/jwtdecoder', {
            method: 'POST',
            headers: {
                'x-api-key': 'YOUR_API_KEY_HERE',
                'Content-Type': 'application/json'
            },
            body: JSON.stringify(requestBody)
        });

        const data = await response.json();
        console.log(data);
    } catch (error) {
        console.error('Error:', error);
    }
}

callJWTDecoderAPI();

Using cURL

curl -X POST "https://api.apiverve.com/v1/jwtdecoder" \
  -H "x-api-key: YOUR_API_KEY_HERE" \
  -H "Content-Type: application/json" \
  -d '{
    "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"
}'

Get your API key: https://apiverve.com

📁 For more examples, see the examples folder

Installation

Choose your preferred programming language:

📦 NPM (JavaScript/Node.js)

npm install @apiverve/jwtdecoder

View NPM Package → | Package Code →

🔷 NuGet (.NET/C#)

dotnet add package APIVerve.API.JWTDecoder

View NuGet Package → | Package Code →

🐍 Python (PyPI)

pip install apiverve-jwtdecoder

View PyPI Package → | Package Code →

💎 Ruby (RubyGems)

gem install apiverve_jwtdecoder

View RubyGems Package → | Package Code →

🐘 PHP (Packagist)

composer require apiverve/jwtdecoder

View Packagist Package → | Package Code →

🎯 Dart (pub.dev)

dart pub add apiverve_jwtdecoder

View pub.dev Package → | Package Code →

🤖 Android (JitPack)

implementation 'com.github.apiverve:jwtdecoder-api:1.0.0'

Package Code →

🐹 Go

go get github.com/apiverve/jwtdecoder-api/go

Package Code →

Why Use This API?

Feature	Benefit
Multi-language SDKs	Native packages for JavaScript, Python, C#, Go, and Android
Simple Integration	Single API key authentication, consistent response format
Production Ready	99.9% uptime SLA, served from 24 global regions
Comprehensive Docs	Full examples, OpenAPI spec, and dedicated support

Documentation

• 🏠 API Home: JWT Decoder API
• 📚 API Reference: docs.apiverve.com/ref/jwtdecoder
• 📖 OpenAPI Spec: openapi.yaml
• 💡 Examples: examples/

What Can You Build?

The JWT Decoder API is commonly used for:

• Web Applications - Add jwt decoder features to your frontend or backend
• Mobile Apps - Native SDKs for Android development
• Automation - Integrate with n8n, Zapier, or custom workflows
• SaaS Products - Enhance your product with jwt decoder capabilities
• Data Pipelines - Process and analyze data at scale

API Reference

Authentication

All requests require an API key in the header:

x-api-key: YOUR_API_KEY_HERE

Get your API key: https://apiverve.com

Response Format

Every APIVerve endpoint returns the same envelope — check status, then read data:

{
  "status": "ok",
  "error": null,
  "data": { ... }
}

Example Response

A real response from the JWT Decoder API:

{
  "status": "ok",
  "error": null,
  "data": {
    "header": {
      "alg": "HS256",
      "typ": "JWT"
    },
    "payload": {
      "sub": "1234567890",
      "name": "John Doe",
      "iat": 1516239022
    },
    "signature": "SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c",
    "isExpired": false,
    "expiresAt": null,
    "issuedAt": "2018-01-18T01:30:22.000Z",
    "tokenAge": "2557 days",
    "algorithm": "HS256",
    "expiresIn": null,
    "notYetValid": false,
    "securityAnalysis": {
      "isUnsecured": false,
      "hasExpiration": false,
      "isLongLived": false,
      "issues": [
        "Token has no expiration (exp) claim — it never expires"
      ]
    },
    "warning": "This API only decodes JWT tokens. It does NOT verify signatures. Do not use for security validation."
  }
}

Support & Community

• 🏠 API Home: JWT Decoder API
• 💬 Support: https://apiverve.com/contact
• 🐛 Issues: GitHub Issues
• 📖 Documentation: https://docs.apiverve.com
• 🌐 Website: https://apiverve.com

Contributing

We welcome contributions! Please see CONTRIBUTING.md for guidelines.

Security

For security concerns, please review our Security Policy.

License

This project is licensed under the MIT License - see the LICENSE file for details.

Acknowledgments

Built with ❤️ by APIVerve

Copyright © 2026 APIVerve. All rights reserved.