JWT Forge MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 91 installs a week from npm. Last commit 25 Feb 2026.
Decode and inspect JWT tokens — header, payload, expiry check
Today is the operative word: we check JWT Forge MCP every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add jwt-forge-mcp -- npx -y jwt-forge-mcp
{
"mcpServers": {
"jwt-forge-mcp": {
"command": "npx",
"args": [
"-y",
"jwt-forge-mcp"
]
}
}
}
[mcp_servers.jwt-forge-mcp]
command = "npx"
args = ["-y", "jwt-forge-mcp"]
{
"mcpServers": {
"jwt-forge-mcp": {
"command": "npx",
"args": [
"-y",
"jwt-forge-mcp"
]
}
}
}
{
"servers": {
"jwt-forge-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"jwt-forge-mcp"
]
}
}
}
Decode PEM certificates, check expiry and inspect a live TLS certificate, all offline
Decode JSON Web Tokens locally: header, claims, expiry timeline and warnings
Pure-Python zero-dependency JWT claims auditor and payload inspector enforcing expiry, audience, and
JWT header shape, payload discarded
MCP server for JWT decoding and inspection
HTTP client, JWT decode, header analysis for AI agents
JWT header.payload.sig shape, value discarded
Live DNS, TLS, HTTP and SEO checks for any host: cert expiry, headers, redirects.
Answers built from our own checks of this server.