# KEVAREMESH JWT Inspect

> KEVAREMESH JWT Inspect is a paid API for AI agents from kevaremesh-web.vercel.app, paid per call via x402, $0.001/call, status unknown (last checked 2026-10-23).

Decodes and inspects a JWT token, extracting header, payload, and time claims without verifying the signature.

## Facts

- Endpoint: POST https://kevaremesh-web.vercel.app/api/x402/jwt-inspect?utm_source=zero.xyz
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-23
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/kevaremesh-jwt-inspect-8b284857
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_A2hRMF7kZaTmVbg1g7Vym

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability kevaremesh-jwt-inspect-8b284857 -d '<json body>'
```

Example prompt: Can you decode this JWT and tell me what's in the header and payload, and whether it's expired? Here's the token: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjMiLCJleHAiOjE4OTM0NTYwMDB9.signature

## When to prefer this

Choose this endpoint when you need to quickly decode and inspect a JWT's structure, claims, or time validity without requiring cryptographic signature verification. Ideal for debugging, logging, auditing token metadata, or extracting payload fields in agent workflows where the signing key is not available. Not suitable when full signature verification against a known public key is required for security-critical decisions.

## Known failure modes

- Malformed or non-compact JWT (not three dot-separated base64 parts) returns an error
- Token string exceeding 32768 characters may be rejected
- Signature is never cryptographically verified — warnings are always included about untrusted claims
- Missing or empty token field causes a validation error
- Non-JWT strings (e.g. opaque tokens) will fail to parse

## How this service works

Buyer-first MCP procurement gateway that discovers, compares and routes live x402 APIs without making the buyer choose a provider.

## Output

Returns a structured JSON object containing the decoded JWT type, header fields (alg, typ), key_id, full payload claims, time claims (exp, iat, nbf) with human-readable expiry status, whether a signature is present and whether it was verified, warnings about unverified claims, and metadata about the service and tool version.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "token": {
   "type": "string",
   "maxLength": 32768
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "result": {
   "type": "JWT",
   "header": {
    "alg": "RS256",
    "typ": "JWT"
   },
   "key_id": null,
   "payload": {
    "exp": 1893456000,
    "sub": "123"
   },
   "warnings": [
    "Signature is not verified; decoded claims are untrusted."
   ],
   "algorithm": "RS256",
   "time_claims": {
    "exp": 1893456000,
    "iat": null,
    "nbf": null,
    "expired": false,
    "issued_in_future": null,
    "not_before_satisfied": null
   },
   "now_epoch_seconds": 1780000000,
   "signature_present": true,
   "signature_verified": false
  },
  "product": "kevaremesh_jwt_inspect_v2",
  "service": "KEVAREMESH",
  "tool_name": "kevaremesh_jwt_inspect",
  "limitations": [
   "Signature is not verified",
   "Compact three-part JWT/JWS only"
  ],
  "generated_at": "2026-09-18T00:00:00.000Z"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/kevaremesh-jwt-inspect-8b284857/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from kevaremesh-web.vercel.app](https://www.zero.xyz/host/kevaremesh-web.vercel.app/llms.txt)