JWKS Viewer & JWT Inspector
Fetch a JSON Web Key Set (JWKS) by URL and inspect its public keys. Decode the matching JWT header to confirm the key ID.
Common Use Cases
- Inspecting Auth0 JWKS endpointFetch https://{your-auth0-domain}/.well-known/jwks.json to inspect the public RSA keys Auth0 uses to sign tokens for your application.
- Verifying Cognito public keysFetch the AWS Cognito JWKS at https://cognito-idp.{region}.amazonaws.com/{userPoolId}/.well-known/jwks.json to inspect the signing keys for your user pool.
- Debugging a JWT with unknown issuerPaste a JWT token to decode its header and extract the 'iss' (issuer) and 'kid' (key ID) claims, then use those to locate and fetch the correct JWKS endpoint.
Pro plan — coming soon
Save your history, create reusable presets, and share outputs with a link. One plan, all tools.
See what's planned →Frequently Asked Questions
Related Tools
HTTP Header Analyzer
Paste raw HTTP response headers and check for missing or misconfigured security headers: CSP, HSTS, X-Frame-Options, and more.
API Request Builder
Build and send HTTP requests from your browser. Set method, headers, and body, then see the full response with status, headers, and body. Server-side proxy avoids CORS restrictions.
CORS Tester
Send a real preflight and actual request to any URL and diagnose the CORS configuration. Identifies missing or misconfigured Allow-Origin, methods, and credentials headers.