About JWT to cURL

Generate a curl command that uses a JWT as the Authorization header. Part of the DevTools Surf developer suite. Browse more tools in the Text / String collection.

Use Cases

• Quickly test authenticated API endpoints from the terminal
• Share reproducible API calls with teammates for debugging
• Generate cURL commands for API documentation examples
• Test JWT expiration handling by replaying requests

Tips

• Paste a JWT to generate a ready-to-use cURL command
• Set the target URL and HTTP method for the generated command
• Include custom headers alongside the Authorization Bearer token

Fun Facts

• JSON Web Tokens (JWT) were standardized in RFC 7519 in May 2015, authored by Michael Jones, John Bradley, and Nat Sakimura.
• A JWT has exactly three Base64url-encoded parts separated by dots: header, payload, and signature — no more, no less.
• The cURL command-line tool was first released by Daniel Stenberg on March 20, 1998, and now handles over 10 billion daily requests worldwide.

FAQ

What does the generated cURL command do?

A curl invocation with `-H 'Authorization: Bearer <token>'` plus any other headers, method, and body you specify. Copy/paste into a terminal to hit the API with the token.

Can I include a request body?

Yes — paste JSON and it becomes a `-d` flag with proper escaping. Automatic content-type header unless you override.

Does it work with custom auth schemes?

The default is Bearer. Toggle to `JWT`, `Token`, or a custom scheme name for APIs that don't use Bearer.

Is the token stored anywhere?

No — it's in the generated command you copy. The tool itself doesn't persist anything. Don't commit the resulting curl command to git.