Inspect JWKS / JWK — Pretty & Inventory

Inspect a JWK or JWKS in your browser. Pretty-print with private fields redacted, or list key inventory. Paste-only — no remote fetch, no JWT verify.

Loading…
JWKS / JWK inspector — browser-local
Inspect a pasted JWK or JWKS document. Private fields (d, RSA factors, oct k) are redacted in output and copy.

Developer notes

• Accepts a single JWK (kty) or a JWKS (keys). • Pretty (redacted) = clone with private fields removed; Copy on Result uses that safe output. • Inventory (metadata) never prints d/k/RSA factors. • No JWT signature verification here — use <a href="/en/jwt-verify">jwt-verify</a>. • No JWKS URL fetch. • 512 KB limit.

Options

View
Pretty (redacted) = indented JSON without private fields; Inventory (metadata) = kid/kty/alg/hasPrivate only.
Sort keys
Orders JSON keys stably for reproducible diffs.

When teams pick this route

• Review a JWKS before committing it. • Check kid/kty/alg without exposing private key material. • Spot public keys vs private material (hasPrivate warning).

Worked examples

Minified JWKS with private d → pretty (redacted)

Before

{"keys":[{"kid":"signing","kty":"RSA","use":"sig","alg":"RS256","n":"sXch8examplePublicModulusValueForDemoOnlyNotARealKey","e":"AQAB","d":"demo-private-exponent-removed-in-output"},{"kid":"verify","kty":"EC","crv":"P-256","x":"MKBAXEBexamplePublicXCoord","y":"4vVexamplePublicYCoord","alg":"ES256"}]}

After

{ "keys": [ { "kid": "signing", "kty": "RSA", "use": "sig", "alg": "RS256", "n": "sXch8examplePublicModulusValueForDemoOnlyNotARealKey", "e": "AQAB" }, { "kid": "verify", "kty": "EC", "crv": "P-256", "x": "MKBAXEBexamplePublicXCoord", "y": "4vVexamplePublicYCoord", "alg": "ES256" } ] }

Same paste → inventory metadata

Before

{"keys":[{"kid":"signing","kty":"RSA","use":"sig","alg":"RS256","n":"sXch8examplePublicModulusValueForDemoOnlyNotARealKey","e":"AQAB","d":"demo-private-exponent-removed-in-output"},{"kid":"verify","kty":"EC","crv":"P-256","x":"MKBAXEBexamplePublicXCoord","y":"4vVexamplePublicYCoord","alg":"ES256"}]}

After

[ { "kid": "signing", "kty": "RSA", "use": "sig", "alg": "RS256", "hasPrivate": true }, { "kid": "verify", "kty": "EC", "alg": "ES256", "crv": "P-256", "hasPrivate": false } ]

Related security tools

To decode a compact JWT use jwt-decode. To verify signatures use jwt-verify. Hub: security tools. Certificates: decode certificate.

Inspect JWKS FAQ

Local JWK / JWKS

When should I use jwt-decode instead?

Use jwt-decode for a compact JWT token (three segments). Use inspect-jwks for a JWK/JWKS JSON document (key sets), not for JWT payload claims.

Are private keys shown?

No. Private fields are stripped from pretty output and copy. A hasPrivate warning appears if they were present in the paste.

Can I fetch a JWKS URL?

No. Paste-only — nothing is fetched from the network.

Does it verify JWT signatures?

No. This tool formats and inventories keys only. To verify a JWT signature against pasted JWKS or JWK, use jwt-verify.

Security & tokens

JWKS, X.509 certificates, and secrets scan — browser-local.

Explore other tool categories

Minify

Shrink code and assets for production — minify JavaScript, CSS, HTML, JSON and XML before gzip or CDN deploy.

Beautify

Make code readable with consistent indentation — beautify JavaScript, CSS, TypeScript, SCSS, LESS, Markdown, GraphQL, SQL, YAML and more in your browser.

Unminify

Expand minified or compressed code — unminify JavaScript, CSS, TypeScript, SCSS, LESS, SQL, YAML and other formats when debugging or reviewing.

Conversion

Transform data between JSON, YAML, XML and CSV locally — no server uploads.

CSS preprocessors

Compile SCSS or LESS to standard CSS in the browser — pair with beautify or minify for a full stylesheet workflow.

JSON Tools

Validate, format, diff and explore JSON payloads — complementary to minifiers and converters.

SVG Tools

Preview, optimize with SVGO, export Data URI, resize, beautify, convert to JSX and validate SVG — all in your browser.

DevOps & Infra

Terraform HCL format/validate/minify, Dockerfile format & lint, Docker Compose and .env validation.

CI/CD

GitHub Actions and GitLab CI — format YAML and check workflow/job structure in your browser.

Logs & observability

Line-oriented JSON/NDJSON and Nginx/Apache access logs — format, filter, validate, and CSV/TSV.

Kubernetes

Multi-doc manifests, structural validate, Ingress/Deployment starters, and Helm values formatting.

Networking / IP

CIDR, subnets, and IPv4/IPv6 helpers — in your browser.

API & schemas

OpenAPI tools to format, validate, and lint your specs.

Encoding

Encode or decode Base64, URL components and HTML entities — client-side only.

Developer utilities

Timestamps, UUID, ULID, Nanoid, cron, passwords, regex, slugify, number bases, case, text diff, and chmod — all client-side.

Text & Markdown

Count words, build Markdown TOCs, and clean line lists — all in your browser.

Serialization

Serialize and deserialize PHP data structures beside JSON workflows.