JWT Extractor
Paste a log, request dump, or config file and get every JWT found — identified by its distinctive three-part, dot-separated Base64URL structure. Useful for pulling tokens out of logs for further inspection.
The JWT Extractor module is already switched on below, with a sample loaded — paste your own text to replace it.
Frequently asked questions
Does it decode the token?
No, this extractor only locates JWT-shaped strings in text; use a dedicated JWT decoder to see the header and payload.
Can I combine it with the API key extractor?
Yes, turn on both to pull JWTs and API keys out of the same log or config in one pass.
Is a found JWT sent anywhere?
No, matching happens entirely in your browser; nothing you paste is ever uploaded.