Inspect JWKS / JWK — Pretty & Inventory
Inspect a JWK or JWKS in your browser. Pretty-print with private fields redacted, or list key inventory. Paste-only — no remote fetch, no JWT verify.
Developer notes
• Accepts a single JWK (kty) or a JWKS (keys). • Pretty (redacted) = clone with private fields removed; Copy on Result uses that safe output. • Inventory (metadata) never prints d/k/RSA factors. • No JWT signature verification here — use <a href="/en/jwt-verify">jwt-verify</a>. • No JWKS URL fetch. • 512 KB limit.
Options
When teams pick this route
• Review a JWKS before committing it. • Check kid/kty/alg without exposing private key material. • Spot public keys vs private material (hasPrivate warning).
Worked examples
Minified JWKS with private d → pretty (redacted)
Before
After
Same paste → inventory metadata
Before
After
Related security tools
To decode a compact JWT use jwt-decode. To verify signatures use jwt-verify. Hub: security tools. Certificates: decode certificate.
Inspect JWKS FAQ
Local JWK / JWKS
When should I use jwt-decode instead?
Use jwt-decode for a compact JWT token (three segments). Use inspect-jwks for a JWK/JWKS JSON document (key sets), not for JWT payload claims.
Are private keys shown?
No. Private fields are stripped from pretty output and copy. A hasPrivate warning appears if they were present in the paste.
Can I fetch a JWKS URL?
No. Paste-only — nothing is fetched from the network.
Does it verify JWT signatures?
No. This tool formats and inventories keys only. To verify a JWT signature against pasted JWKS or JWK, use jwt-verify.
Security & tokens
JWKS, X.509 certificates, and secrets scan — browser-local.
Explore other tool categories
Minify
Shrink code and assets for production — minify JavaScript, CSS, HTML, JSON and XML before gzip or CDN deploy.
Beautify
Make code readable with consistent indentation — beautify JavaScript, CSS, TypeScript, SCSS, LESS, Markdown, GraphQL, SQL, YAML and more in your browser.
Unminify
Expand minified or compressed code — unminify JavaScript, CSS, TypeScript, SCSS, LESS, SQL, YAML and other formats when debugging or reviewing.
Conversion
Transform data between JSON, YAML, XML and CSV locally — no server uploads.
CSS preprocessors
Compile SCSS or LESS to standard CSS in the browser — pair with beautify or minify for a full stylesheet workflow.
JSON Tools
Validate, format, diff and explore JSON payloads — complementary to minifiers and converters.
SVG Tools
Preview, optimize with SVGO, export Data URI, resize, beautify, convert to JSX and validate SVG — all in your browser.
DevOps & Infra
Terraform HCL format/validate/minify, Dockerfile format & lint, Docker Compose and .env validation.
CI/CD
GitHub Actions and GitLab CI — format YAML and check workflow/job structure in your browser.
Logs & observability
Line-oriented JSON/NDJSON and Nginx/Apache access logs — format, filter, validate, and CSV/TSV.
Kubernetes
Multi-doc manifests, structural validate, Ingress/Deployment starters, and Helm values formatting.
Networking / IP
CIDR, subnets, and IPv4/IPv6 helpers — in your browser.
API & schemas
OpenAPI tools to format, validate, and lint your specs.
Encoding
Encode or decode Base64, URL components and HTML entities — client-side only.
Developer utilities
Timestamps, UUID, ULID, Nanoid, cron, passwords, regex, slugify, number bases, case, text diff, and chmod — all client-side.
Text & Markdown
Count words, build Markdown TOCs, and clean line lists — all in your browser.
Serialization
Serialize and deserialize PHP data structures beside JSON workflows.