Jwt Ref
@jwt: context references that decode a JSON Web Token for the model: @jwt:<token> (or a quoted "Bearer <token>") attaches the header with the algorithm in words, every claim as JSON, the exp, nbf, iat and auth_time claims in UTC with how long ago or ahead they are, whether the token has expired and its lifetime, and notes on alg none, a missing or empty signature, a header that names its own key (jku, x5u, jwk), crit and duplicate names; encrypted tokens (JWE) show their header only; the TUI and Desktop composer preview a token as you type it. The signature is never verified.
Good to know before installing
Reads only the text of the reference itself and the system clock, using Python's base64, json and datetime; no network (no key sets fetched), no files read or written, no subprocess, no credentials read; the plugin keeps no copy of the token, but the @jwt: reference and the decoded header and claims become part of the message sent to your model provider and saved in the session history, so decode only tokens you are willing to share with it; register() only adds the @jwt: reference provider.
From the plugin's catalog listing.
How to install
- Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install jwt-ref - Said no? Turn it on later:
hermes plugins enable jwt-ref - Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide (opens in a new tab).
- Category
- Cost, speed & monitoring
- Maintained by
- olric3015 (Community)
- Needs
- No API keys declared
- Needs Hermes
- 0.21.5 or newer
- Version
- 1.0.0
- In the catalog
- 2026-10-23
Full setup & settings ↗Source code ↗
More in cost, speed & monitoring
All cost, speed & monitoring plugins
New Hermes Agent updates every day on X. Follow @HermesWatcher