Jwt Security Validator MCP tool

MCP findutils:jwt_security_validator

Decode a JWT and return a list of security checks (algorithm strength, expiration, not-before, issued-at, issuer, audience, subject, signature presence) plus an overall valid flag. Does NOT verify the signature — it only inspects claims and header fields.

Needs an API key. Running a tool needs an API key. Keys are not for sale yet: ask for early access. About API keys

Open the tool Try it

Arguments

application/json

token

string required

The JWT to inspect (three dot-separated base64url segments).
now

integer optional

Unix timestamp (seconds) to evaluate time claims against. Default: current time.

Example arguments

Verified

{
  "token": "eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ4In0.sig"
}

claude mcp add findutils --transport http https://mcp.findutils.com/ --header "Authorization: Bearer YOUR_API_KEY"

{
  "mcpServers": {
    "findutils": {
      "url": "https://mcp.findutils.com/",
      "headers": {
        "Authorization": "Bearer YOUR_API_KEY"
      }
    }
  }
}

curl -X POST https://mcp.findutils.com/ \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "tools/call",
    "params": {
      "name": "jwt_security_validator",
      "arguments": {
        "token": "eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ4In0.sig"
      }
    }
  }'

Also a REST endpoint

The same tool answers plain HTTP at POST /api/tools/jwt-security-validator/execute.

REST reference

Rate limit: 120 a minute, per IP
Auth: API key
REST id: jwt-security-validator
MCP name: jwt_security_validator
Category: Developer
Machine-readable: openapi.json · markdown.md

Arguments

Example arguments

More Developer tools

More to explore