Find out whether your JWT is valid and authentic.
Checks a JWT's structure, claims, and signature to report whether it is valid.
When to use it
Use when the user asks to verify, validate, or check a JWT.
Give it a JWT and optionally a verification key or secret; it returns a validation report, explicitly noting unverified signatures.
What you provide
The preferred signature-verification path runs JavaScript with Node.js.
Reads a user-provided HMAC secret from an environment variable for signature verification; a PEM public key or JWKS URI is an alternative, and validation without a key skips signature verification.
This skill
jose
Installs jose globally if missing