# jwtdecode: Decode JWT – Read and Verify a JSON Web Token

> jwtdecode (Decode JWT – Read and Verify a JSON Web Token) is a 1001fx API function in the group Data & JSON: POST https://api.1001fx.com/data/jwtdecode, 1 credit per call. It works as a ready-made module in Make or as a plain HTTP call.

Reads header and payload of a JSON Web Token. With a secret or public key it also verifies the signature (HS256/384/512, RS256/384/512); expired (exp) and not-yet-valid (nbf) tokens are reported. "none" tokens never count as verified.

- Group: Data & JSON
- Endpoint: `POST https://api.1001fx.com/data/jwtdecode`
- Authentication: header `X-API-KEY: YOURSECRETAPIKEY`
- Content type: application/json
- Credits: 1 credit per call
- Ready-made in: Make
- Docs: https://1001fx.com/functions/jwtdecode

## Parameters

- `token` (string, required) – Token: The JSON Web Token.
- `secret` (string, optional) – Secret or public key: Optional: shared secret (HS*) or PEM public key (RS*) to verify the signature.

## Example: Decode JWT – Read and Verify a JSON Web Token

```bash
curl -X POST 'https://api.1001fx.com/data/jwtdecode' \
  -H 'X-API-KEY: YOURSECRETAPIKEY' \
  -H 'Content-Type: application/json' \
  -d '{"token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOjQyLCJyb2xlIjoiZWRpdG9yIn0.Z-hOPw5By6U56in1QdKNrcmRQb2WWqWtwK8lpt1PRKY","secret":"my-shared-secret"}'
```