Free Tool · Client-Side Only

OAuth 2.0 / OIDC
Token Debugger.

Decode and inspect OAuth 2.0 access tokens and OIDC ID tokens. Analyse scopes, claims, expiry, and detect authentication misconfigurations.

🔑

Token Decoder

🔐

PKCE Helper — code_verifier & code_challenge

Generate a PKCE pair for the Authorization Code with PKCE flow. The verifier is sent at token exchange; the challenge is sent at authorization.

AquilaX Platform

Detect broken authentication
in your APIs.

AquilaX detects broken authentication, JWT misconfigurations, token leakage, and OAuth misconfiguration in your APIs automatically.