supabase-extract-jwt

Finds exposed Supabase tokens and analyzes their claims, expiration, and security risks.

When to use it

Use to find exposed JWTs, inspect claims and expiration, detect hardcoded user tokens, or understand authentication flows.

Give it a target application URL; it extracts and analyzes Supabase JWTs and saves local evidence files.