Free · local · no account

Inspect a signed receipt before you integrate.

Decode a compact JWT/JWS, inspect its claims and verify an ES256 signature with a public JWKS. Processing stays in this browser, with no upload or storage.

Use synthetic or redacted data. Paste only public keys. A key you supply is not independently trusted, and a valid signature does not authorize an action.

Compact token — maximum 32 KiBPublic JWKS — maximum 32 KiB, EC P-256 onlyExpected issuer (optional)Expected audience (optional)

Understand the result

Decode only does not verify a signature. Signature verification proves integrity relative to the supplied public key. Issuer, audience and standard exp/nbf checks are reported separately when available. This tool does not establish the key’s origin, current source trust, revocation, receipt policy, request/deployment context or replay safety.

For an operational Xynthera decision, use the SDK’s documented context-bound verifier and enforce its outcome in your application. This tool always reports operational_authorization: false.

Integrate the SDK Automate the available checks — from €10

Cryptographic parsing and verification use jose 6.2.12, MIT licence. Try the free registration checker.