encoding

Decode a JWT's header and claims (no signature verification)

Decodes a JWT's header and claims WITHOUT verifying the signature — for inspection only, never for an access decision. Pass reference_time to also evaluate is_expired against the exp claim.

post/v1/encoding/jwt/decode

Request

  • Base URL: https://api.snipget.ai (the document declares no server; this is the origin it was published from)
  • URL: https://api.snipget.ai/v1/encoding/jwt/decode
  • Auth: none declared

Query parameters

include_receiptboolean

Set true to attach an execution receipt at meta.receipt — caller-verifiable sha256 hashes over the RFC 8785 (JCS) canonicalization of this call's as-received JSON body and its result (free, like include_trace). Reproduce with any JCS library: input_hash = sha256(jcs({"tool": <request path>, "args": <your body minus include_trace/include_receipt>})); result_hash = sha256(jcs(result)). For deterministic tools, same input on the same build reproduces result_hash.

Headers

authorizationstring nullable
X-API-Keystring nullable

Request body

valuestring required

The JWT to decode (signature is NOT verified).

reference_timestring nullable

Optional epoch or ISO 8601 instant to evaluate is_expired against.

include_traceboolean

Response

Successful Response

statusstring
confidencenumber required

Changes

No recorded changes to this operation across all 1 revision of this API.