Jwtauditormcp

What is Jwtauditormcp?

Jwtauditormcp is an MCP server that provides advanced JWT auditing tools inspired by JWTAuditor, including decoding, vulnerability analysis, secret bruteforcing, and token generation/editing. It is designed for use with Claude Desktop, Cursor, and other MCP-compatible clients.

How to use Jwtauditormcp?

Install dependencies using uv pip install -r pyproject.toml, then run the server with uv run server.py. Configure your MCP client (e.g., Claude Desktop) by adding a stdio transport entry to mcpServers.json with command "uv", args ["run", "server.py"], and the cwd set to the project directory.

Key features of Jwtauditormcp

• JWT Decoder: decodes header, payload, and signature.
• JWT Analyzer: detects vulnerabilities (alg=none, weak algorithms, missing claims, header injection, sensitive data).
• JWT Secret Bruteforcer: brute‑forces HS256/HS384/HS512 secrets using a wordlist.
• JWT Generator/Editor: create and sign JWTs (HS* and RS* support).

Use cases of Jwtauditormcp

• Decode and analyze JWTs for security vulnerabilities.
• Brute‑force weak HMAC JWT secrets.
• Generate and edit JWTs for testing and development.
• Perform local security audits of JWT implementations.

FAQ from Jwtauditormcp

Is my token data sent to an external service?

No, all JWT operations are performed locally. No tokens or secrets are sent to any external service.

What are the runtime dependencies of Jwtauditormcp?

The server requires Python and the uv package manager. Dependencies are listed in pyproject.toml.

How do I configure Jwtauditormcp with Claude Desktop?

Add a stdio