JWT Decoder API — CUB SOFTWARE Developer

Base URL

Base https://cubsoftware.site

Authentication

No API key required — this endpoint is publicly accessible.

Please include a descriptive User-Agent header identifying your app.

JWT Decoder

GETPOST /api/jwt/decode Encoding

Read the parts of a token. The signature is NOT verified.

Parameter	Type	Required	Description
token	string	required	The JWT to read. May also be sent as a POST body.

Example Response

{
  "expired": null,
  "expires_at": null,
  "header": {
    "alg": "HS256"
  },
  "payload": {
    "a": 1
  },
  "signature_present": true,
  "warning": "The signature is NOT verified. Never trust a token because this parsed it."
}

curl 'https://cubsoftware.site/api/jwt/decode?token=eyJhbGciOiJIUzI1NiJ9.eyJhIjoxfQ.x'
const res  = await fetch('https://cubsoftware.site/api/jwt/decode?token=eyJhbGciOiJIUzI1NiJ9.eyJhIjoxfQ.x');
const data = await res.json();
console.log(data.header, data.payload);
const https = require('https');

https.get('https://cubsoftware.site/api/jwt/decode?token=eyJhbGciOiJIUzI1NiJ9.eyJhIjoxfQ.x', (res) => {
    let body = '';
    res.on('data', chunk => body += chunk);
    res.on('end', () => {
        const data = JSON.parse(body);
        console.log(data.header, data.payload);
    });
});
import requests

res  = requests.get('https://cubsoftware.site/api/jwt/decode?token=eyJhbGciOiJIUzI1NiJ9.eyJhIjoxfQ.x')
data = res.json()
print(data['header'], data['payload'])
<?php
$res  = file_get_contents('https://cubsoftware.site/api/jwt/decode?token=eyJhbGciOiJIUzI1NiJ9.eyJhIjoxfQ.x');
$data = json_decode($res, true);
echo $data['header'], $data['payload'];
package main

import (
    "encoding/json"
    "fmt"
    "io"
    "net/http"
)

func main() {
    resp, _ := http.Get("https://cubsoftware.site/api/jwt/decode?token=eyJhbGciOiJIUzI1NiJ9.eyJhIjoxfQ.x")
    defer resp.Body.Close()
    body, _ := io.ReadAll(resp.Body)
    var data map[string]any
    json.Unmarshal(body, &data)
    fmt.Println(data["header"], data["payload"])
}
using System.Net.Http.Json;

var client = new HttpClient();
var data   = await client.GetFromJsonAsync<Dictionary<string, object>>(
    "https://cubsoftware.site/api/jwt/decode?token=eyJhbGciOiJIUzI1NiJ9.eyJhIjoxfQ.x"
);
Console.WriteLine(data["header"]);
Console.WriteLine(data["payload"]);
import java.net.URI;
import java.net.http.*;
import java.util.Map;
import com.fasterxml.jackson.databind.ObjectMapper;

var client = HttpClient.newHttpClient();
var req    = HttpRequest.newBuilder()
    .uri(URI.create("https://cubsoftware.site/api/jwt/decode?token=eyJhbGciOiJIUzI1NiJ9.eyJhIjoxfQ.x"))
    .build();
var res  = client.send(req, HttpResponse.BodyHandlers.ofString());
var data = new ObjectMapper().readValue(res.body(), Map.class);
System.out.println(data.get("header"));
System.out.println(data.get("payload"));
require 'net/http'
require 'json'

uri  = URI('https://cubsoftware.site/api/jwt/decode?token=eyJhbGciOiJIUzI1NiJ9.eyJhIjoxfQ.x')
data = JSON.parse(Net::HTTP.get(uri))
puts data['header'], data['payload']

Try It

Live request

Edit the path and send it. This runs against the real endpoint.

Press Send to run the request.

Rate Limits

10 requests per second per IP, across every endpoint.

Going over returns 429 — back off and retry.

The Other 45 APIs

Memes Snowflake Decoder Timestamp Builder Permission Decoder Embed Validator Colour Converter Password Generator Hashes UUIDs Placeholder Text Intent Decoder Custom Emoji Message Links Invite Codes Bot Invite Builder Markdown Escape Mentions Webhook URLs OAuth2 URLs Discord Limits Base64 URL Encoding HTML Escaping Case Converter Slugify Word Count Reverse Text ROT13 / Caesar JSON Formatter Number Bases Byte Sizes Durations Current Time Random Numbers Random Pick Dice Statistics Email Check URL Check IP Check Token Generator HMAC Signatures Exchange Rates Currency Converter QR Codes