jwt-verify
JWT signature and claims verification — Verifies a JWS-compact JWT: signature over base64url(header).base64url(payload) with Web Crypto under the exact algorithm in the token's alg header (HS256/384/512, RS256/384/512, PS256/384/512, ES256/384/512, EdDSA). Refuses 'none' unconditionally and rejects any alg not in the caller's allowedAlgorithms. Validates exp/nbf with a configurable clock-skew tolerance (default 60s), iss equality, a
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"token": "<token>",
"key": "<key>",
"allowedAlgorithms": "<allowedAlgorithms>"
},
"name": "jwt-verify"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| key | Yes | ||
| token | Yes | The JWS-compact JWT: three base64url parts joined by '.'. | |
| issuer | No | Require payload.iss to equal this. | |
| nowIso | No | Override 'now' for deterministic tests. | |
| audience | No | Require payload.aud to include this. | |
| toleranceSeconds | No | Clock-skew tolerance for exp/nbf. Default 60s. | |
| allowedAlgorithms | Yes | Algorithms the caller accepts; verification fails if the header's alg is not here. |