Decode a JWT (no verify)
API · /jwt-api
JWT API
A fast, fully-local JSON Web Token toolkit: sign a JSON payload into a JWT, verify a token signature together with its exp and nbf claims using a constant-time comparison, and decode a token header and payload without verifying. Supports the HMAC algorithms HS256, HS384 and HS512, automatically adds the iat claim and an exp claim from expires_in. Built on Node crypto and secrets are never logged, so responses are instant, private and always available. Every endpoint accepts input via the query string or the request body. Ideal for authentication, API gateways, session and token tooling, microservices and webhooks.
API health
healthy- Uptime
- 100.00%
- Server probes · 24h
- Avg latency
- 81 ms
- Server probes · 24h
- Subscribers
- 4,765
- active
- Total calls
- 57
- last 7 days
Pricing
Pick a tier — billed monthly, cancel anytime.
Free
Free
- 6,000 calls / month
- 2 requests / second
- Hard cap (429 above quota, no overage)
- 6,000 requests/month, 2 req/s
- All endpoints: sign, verify, decode (HS256/384/512)
- Constant-time verify, secrets never logged
- No credit card
Basic
€6.00 /month
- 125,000 calls / month
- 8 requests / second
- Hard cap (429 above quota, no overage)
- 125,000 requests/month, 8 req/s
- Full sign + verify + decode, all HMAC sizes
- exp/nbf claim validation
- Commercial use, email support
Pro
€20.00 /month
- 850,000 calls / month
- 25 requests / second
- Hard cap (429 above quota, no overage)
- 850,000 requests/month, 25 req/s
- All endpoints, priority routing
- Constant-time compare, no-log guarantee
- Priority email support
Mega
€50.00 /month
- 4,500,000 calls / month
- 80 requests / second
- Hard cap (429 above quota, no overage)
- 4,500,000 requests/month, 80 req/s
- Full JWT toolkit at scale
- Highest throughput for gateways & microservices
- Priority support, commercial use
Built by
Related APIs
Other APIs with overlapping tags.
Encoding API
A fast, fully-local encoding toolkit: encode and decode text between base64, base64url, base32 (RFC 4648), hex, URL percent-encoding, HTML entities, binary and ASCII85 — plus JWT inspection (decode header and payload without verifying the signature). Pure server-side compute, no third-party upstream, so responses are instant and always available. Ideal for developer tools, webhooks, data pipelines, debugging and integrations.
api.oanor.com/encoding-api
Bcrypt API
Hash and verify passwords with bcrypt, server-side. Generate a salted bcrypt hash at a cost factor you choose (4–14), check a plaintext password against an existing hash, or inspect a hash to read its bcrypt version, cost factor and salt. Fully compatible with bcrypt hashes from PHP ($2y$), Node, Python and others, so you can verify and migrate existing credentials. Pure server-side computation with no third-party upstream, so it is always available — and it offloads the deliberately CPU-intensive hashing work from your own servers. Ideal for adding password authentication, credential migration, auth tooling, testing and no-code backends.
api.oanor.com/bcrypt-api
TOTP / 2FA API
Add and test two-factor authentication without wrangling a crypto library. Generate a fresh base32 secret with a ready-to-scan otpauth URI, compute the current time-based one-time code (RFC 6238), verify a code submitted by a user with an adjustable drift window, or build an otpauth:// URI for any secret. Supports SHA-1, SHA-256 and SHA-512, 6 to 8 digits and a custom period, and is fully compatible with Google Authenticator, Authy, 1Password and other authenticator apps. Pure server-side computation with no third-party upstream, so responses are instant and the service is always available. Ideal for adding 2FA to apps, authentication tooling, QA and testing, and no-code automation.
api.oanor.com/totp-api
Shentu API
Live on-chain data for Shentu (chain id shentu-2.2) — the security-focused Cosmos-SDK Layer-1 of the CertiK ecosystem, whose native token is CTK — served directly from public LCD/REST nodes with multi-node failover. The status endpoint returns the latest block height and time, chain id, the staking bond denom and the current minting inflation rate. The validators endpoint lists the active bonded validator set ranked by stake, each with its moniker, operator address, self-plus-delegated CTK, commission rate and jailed flag. The supply endpoint returns the total CTK supply, the amount bonded in staking and the resulting bonded ratio. The governance endpoint returns the most recent on-chain proposals with their id, title, status and voting window. Token amounts are converted from base micro-CTK (6 decimals) into whole CTK, and every figure is read live from the chain — nothing bundled or modelled — behind a short server-side cache with keep-warm so the feed stays fast and fresh. Ideal for staking dashboards, validator and delegator tooling, explorers, governance trackers and portfolio or analytics apps across the Cosmos and security-infrastructure ecosystem. Live keyless upstream. 5 endpoints.
api.oanor.com/shentu-api
Frequently asked questions
Quick answers about pricing, quotas, and integration.
How do I get an API key for JWT API?
What's the rate limit for JWT API?
How much does JWT API cost?
Can I cancel my subscription anytime?
Is JWT API GDPR-compliant?
Pick an endpoint from the list on the left to see its details and try it.
Code snippets
Sign up to get an API key, then call any path under your slug.
curl https://api.oanor.com/jwt-api/SOME_PATH \
-H "x-oanor-key: oanor_test_..."
const res = await fetch("https://api.oanor.com/jwt-api/SOME_PATH", {
headers: { "x-oanor-key": "oanor_test_..." }
});
const data = await res.json();
$ch = curl_init("https://api.oanor.com/jwt-api/SOME_PATH");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, ["x-oanor-key: oanor_test_..."]);
$response = curl_exec($ch);
import requests
r = requests.get(
"https://api.oanor.com/jwt-api/SOME_PATH",
headers={"x-oanor-key": "oanor_test_..."},
)
print(r.json())
Ratings
Sign in to rate.
No reviews yet.
Discussion
Ask questions, share usage tips, get answers from the provider and other developers. Public — anyone can read.
Sign in to start a thread or reply.
Sign inNew thread
·
-
Provider answer
🔒 This thread is locked — no new replies.
-
·
- No threads yet — start the discussion.
Support
Private 1:1 support with the provider — billing questions, integration issues, account problems. Only you and the provider team can see these threads.
Sign in to open a support ticket.
Sign inOpen new ticket
Describe what you need help with. The provider team gets an email and replies on the ticket page.
-
·
Urgent - No tickets yet for this API.