Pricing

from $0.0005 / jwt processed

Try for free

Go to Apify Store

JWT Decoder & Verifier — Bulk

Try for free

Decode JWT header and payload, and optionally verify the signature and expiry against a secret or JWKS. Debug and audit auth tokens in bulk.

Pricing

from $0.0005 / jwt processed

Rating

0.0

(0)

Developer

hiper soft

Actor stats

Bookmarked

Total users

Monthly active users

9 days ago

Last modified

What it does

Decodes the header and payload of each JWT (claims, issuer, subject, audience, timestamps).
Flags expired tokens.
Optionally verifies the signature against a secret / public key, or a JWKS endpoint (RS256/ES256).

Use cases

Backend debugging — inspect what a token actually contains.
Auth audits — check claims and expiry across many tokens.
Integration testing — verify tokens from an identity provider.

Input

{ "tokens": ["eyJhbGci..."], "secret": "", "jwksUri": "" }

Field	Type	Description
`tokens`	array	JWTs to decode/verify.
`secret`	string	Optional HMAC secret or PEM public key.
`jwksUri`	string	Optional JWKS endpoint for RS/ES tokens.

Output

{ "algorithm": "HS256", "issuer": "acme", "expiresAt": "2026-01-01T00:00:00.000Z", "expired": true, "signatureVerified": null, "valid": false, "payload": { "sub": "1234567890" } }

Output schema

Field	Type	Description
`valid`	boolean	Signature verified AND not expired.
`expired`	boolean	Whether the token is past its `exp`.
`algorithm`	string	Signing algorithm.

FAQ

Can I verify signatures? Yes — provide a secret/public key, or a jwksUri for provider-signed tokens.

Can I automate it? Yes — via integrations on the Apify platform and the Apify API.

Notes

Original clean-room implementation. Tokens are processed only to decode/verify them.

Jwt API

vivid_astronaut/jwt

BRAINIALL Team

JWT Decoder & Security Analyzer

perryay/jwt-decoder-analyzer

Decode JWT tokens, verify HMAC/RSA/ECDSA/EdDSA signatures, detect alg=none bypass, key confusion, weak secrets, and expired tokens. Batch processing and audit report generation for DevSecOps teams.

Perry AY

JWT Decoder - Header, Claims, Expiry (Decode Only, No Keys)

eliai/jwt-decoder

Decode up to 50 JWTs per run: header, payload, iss/sub/aud, humanized iat/exp/nbf, expiry verdict, security warnings (alg=none, no-expiry, sensitive claims). Decode ONLY — signatures never verified, tokens never transmitted anywhere. $0.002 per token vs $0.02 measured incumbent; malformed free.

Broke to Built

Frontend Secret Exposure Scanner

q_services/frontend-secret-exposure-scanner

Find AWS, Google, GitHub, Stripe, Slack, JWT, private-key and generic secret patterns exposed in HTML or JavaScript.

Q Services

Bulk email validator

unlimitedleadtestinbox/bulk-email-validator

Email verifier : Verify professional emails in bulk

unli

Webhook Signature Verifier

stellar_ballet_0bu/webhook-sig-verifier

Verify HMAC-SHA256/SHA1/SHA512, Stripe-Signature, GitHub X-Hub-Signature-256, Apify webhook, and Bearer-token webhook payloads against a shared secret. Constant-time compare, per-check pass/fail, structured reason codes for n8n/Make/Sheets alerts.

Nikita S

Bulk Email Verify Cheap price : 15$/1000 records

clothefobia/bulk-email-verify

Bulk Email Verify : with this tool you can verify bulk Email in bulk at very reaonable cost.

clothe fobia

Actor Adopte Get Auth Token

straightforward_understanding/actor-adopte-get-auth-token

Automates login to Adopte.app and extracts authentication tokens. Uses French residential proxies, handles the complete login flow (email/password → refresh token → JWT). The extracted token enables authenticated API requests for profile searching, viewing, messaging, and & other platform features.

Yann Feunteun

Bulk Email Verifier

invaluable_rondeau/email-verifier-bulk

Bulk email verifier for syntax, MX, disposable and role checks. Return deliverability signals and a 0–100 score; pay only for successfully verified emails.