# Strale JWT Decode

> Strale JWT Decode is a paid API for AI agents from api.strale.io, paid per call via x402, $0.0216/call, status unknown (last checked 2026-09-14).

Decodes and inspects a JWT token, returning its header, payload claims, and signature metadata without requiring a secret key.

## Facts

- Endpoint: GET https://api.strale.io/x402/v2/jwt-decode
- Price: $0.0216/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/strale-jwt-decode-c54e5a28
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_eb7todn9EZQIgZh3Wa_Pa

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability strale-jwt-decode-c54e5a28
```

Example prompt: Can you decode this JWT for me and show me what claims it contains, including who issued it and when it expires? Here's the token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyXzEyMyIsImV4cCI6MTcwMDAwMDAwMH0.abc123

## When to prefer this

Choose this endpoint when you need to inspect or debug the contents of a JWT token without needing signature verification, and when you want an auditable, cryptographically logged record of the decode operation. Useful in regulated or compliance-sensitive pipelines where every data operation must be traceable.

## Known failure modes

- Malformed or non-JWT string returns an error indicating invalid token format
- Missing 'token' query parameter results in a validation error
- Expired token is decoded successfully but expiration is flagged in the payload — this endpoint does not validate signatures, so expiry enforcement must be done by the caller
- Network errors or service unavailability return 5xx responses

## How this service works

The trust layer for AI agents — 250+ independently tested data capabilities across 27 countries. Execute capabilities via REST, MCP, A2A, or x402 micropayments. Every call returns an audit record with cryptographic chain hashing.

## Output

Returns the decoded JWT header (algorithm, token type), payload (all embedded claims such as sub, iss, iat, exp, and any custom fields), and metadata about the token structure. Also includes an audit record with a cryptographic chain hash per the Strale trust layer.

## Request schema (JSON Schema)

```json
{
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "type": "object",
 "properties": {
  "input": {
   "type": "object",
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "type": "string",
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ]
    },
    "queryParams": {
     "type": "object",
     "required": [
      "token"
     ],
     "properties": {
      "token": {
       "type": "string"
      }
     }
    }
   },
   "required": [
    "type",
    "method"
   ],
   "additionalProperties": false
  }
 },
 "required": [
  "input"
 ]
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/strale-jwt-decode-c54e5a28/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.strale.io](https://www.zero.xyz/host/api.strale.io/llms.txt)