01
Read the structure
Separate a JWT into its header, payload and signature sections. See the JSON in a format that is easier to scan.
{
"alg": "HS256",
"typ": "JWT"
}
"alg": "HS256",
"typ": "JWT"
}
A small toolkit for developers
Get the context
behind your tokens.
Understand what an API token carries, inspect its structure and make sense of authorization flows — without adding another service to your stack.
Local-first by design. Your token never leaves this browser.
STRUCTURE FOUND
Readable tokenSample payload decoded
DEMOTYPEJWT
ALGORITHMHS256
ISSUERapi.example.dev
SUBJECTuser_1042
CLAIMS06 FIELDS
auddashboardstring
scoperead:projectsstring
exp2033-05-18date
✳ NO SERVER UPLOADS
Made for API workflows
Nothing to install
Runs in your browser
01 / THE IDEA
Tokens are small.
The details matter.
Access tokens often look like unreadable strings. But inside a structured token are useful clues: who issued it, what it is meant for, when it expires and which permissions it describes.
TokenGetter gives those details a readable shape, so you can spend less time guessing and more time building.
02 / WHAT YOU CAN DO
A clearer view,
one token at a time.
Focused tools for the everyday questions that come up when APIs, clients and authorization meet.
02
Understand claims
Put common fields like iss, aud, iat and exp into context.
CLAIMS, MADE LEGIBLE ↗
03
Debug with care
Inspect the shape of a token while keeping its contents on your own device.
LOCAL BY DEFAULT ↗
03 / TRY THE TOOL
Take a closer look.
Paste a JWT to decode its header and payload locally. The signature is displayed as a segment only; it is not cryptographically verified.
JWT INSPECTORNO NETWORK REQUESTS
Use a test token only. Avoid pasting production secrets into tools you do not control.
Your decoded view will appear here.Paste a JWT above or load the sample to get started.
This demo only decodes Base64URL-encoded sections. Decoding is not signature verification and does not establish that a token is authentic or safe to use.
TG
04 / WHY “TOKENGETTER”?
A name that says
what it does.
“Token” is the piece of data that carries identity and access context. “Getter” is a familiar developer word for retrieving or reading a value. Put them together and you get TokenGetter: a practical place to get a clearer view of the tokens your applications already use.
PRIVATE BY DESIGN The demo runs entirely in your browser. No account, no uploads, no token collection.
BUILT FOR THE DETAILSLess guesswork.
Open the inspector ↑