Automic VaultAutomic Vault

brew

Install jwt-cli with Homebrew, apk, MacPorts, Nix, pacman, scoop, apt

Super fast CLI tool to decode and encode JWTs built in Rust. Version 6.2.0 via Homebrew; verified from local package data.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install jwt-cli

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install jwt-cli

MacPorts ports tree · devel/jwt-cli/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add jwt-cli

Alpine Linux edge package indexes · jwt-cli · source: dl-cdn.alpinelinux.org

Nixverified · 92%
nix profile install nixpkgs#jwt-cli

nixpkgs package indexes · pkgs/by-name/jw/jwt-cli/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S jwt-cli

Arch Linux sync databases · jwt-cli · source: geo.mirror.pkgbuild.com

Debian aptverified · 92%
sudo apt install jwt

Debian stable package indexes · jwt · source: deb.debian.org

Windows

Scoopverified · 92%
scoop install main/jwt-cli

Scoop official bucket manifest trees · bucket/jwt-cli.json · source: api.github.com

overview

Package summary

Super fast CLI tool to decode and encode JWTs built in Rust

Commands and aliases

  • jwt

history

Project history and usage

jwt-cli is a Rust command-line utility for decoding, verifying, and encoding JSON Web Tokens. It became a common package-manager answer to the everyday developer need to inspect opaque bearer tokens from a shell pipeline.

Project history

Mike Engel released jwt-cli publicly in March 2017, with GitHub release metadata showing 0.1.0 as an initial prerelease on March 6, 2017. The README frames the tool around two goals: decoding JWT headers and claims like other JWT CLIs, and encoding new JWTs with flexible headers, claims, and secrets.

The project evolved with the Rust JWT ecosystem. Its changelog records a move to the `jsonwebtoken` crate in 0.3.0, JSON output in 2.1.0, stdin support in 2.4.0, ECDSA support in 2.5.0, PEM support through `jsonwebtoken` 7 in 3.0.0, stricter expiration handling and file secrets in 5.0.0, EdDSA and output-file support in 6.0.0, and JWKS support in 6.1.0.

Adoption history

The tool spread through several package ecosystems because JWT inspection is a cross-platform developer workflow. The README documents installation through Homebrew, MacPorts, Cargo, FreeBSD ports, Scoop, and Arch Linux, and the Homebrew formula also records package-manager distribution under the `jwt-cli` formula.

How it is used

jwt-cli is used in two main ways: as an interactive command such as `jwt decode TOKEN`, and as a pipeline component, for example extracting an access token with `curl` and `jq` and piping it into `jwt decode -`. Encoding support lets developers create test tokens without reaching for a web UI.

Why package nerds care

Its significance is package-manager convenience: JWTs are everywhere in web auth, and a small static-ish Rust CLI with shell completion, stdin behavior, and broad OS packaging is exactly the kind of utility users expect to install with one command.

Timeline

  • 2017-03-06: 0.1.0 initial prerelease published.
  • 2018-09-24: 2.1.0 adds JSON output for piping into tools such as `jq`.
  • 2019-04-19: 2.4.0 adds stdin support for encode and decode.
  • 2021-11-14: 5.0.0 adds file secrets and stricter expiration validation.
  • 2023-06-22: 6.0.0 adds EdDSA support and output-file support.
  • 2024-05-27: 6.1.0 adds JWKS support and shell completion.

Related projects

  • jwt-cli sits alongside browser tools such as JWT.io, security-focused JWT tooling such as jwt-hack, and the Rust `jsonwebtoken` crate used internally for token operations.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 8 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
jwtcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version6.2.0
manager updated
local dataok
upstreamcurrent
latest detected6.2.0

https://github.com/mike-engel/jwt-cli

  • infoNo package-manager update timestamp was available.low confidence

install metadata

Package metadata

Package keybrew:jwt-cli
Version6.2.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/jwt-cli
Homepagehttps://github.com/mike-engel/jwt-cli
Repositoryhttps://github.com/mike-engel/jwt-cli
Upstream docshttps://github.com/mike-engel/jwt-cli
LicenseMIT
Source archivehttps://github.com/mike-engel/jwt-cli/archive/refs/tags/6.2.0.tar.gz
Build dependenciesrust
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namejwt-cli
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

jwt-cli

nix profile install nixpkgs#jwt-cli
  • normalized package name match
  • Matched by: Jwt Cli
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/jw/jwt-cli/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

jwt-cli 6.2.0-r0

Super fast CLI tool to decode and encode JWTs

https://github.com/mike-engel/jwt-cli

sudo apk add jwt-cli
  • License: MIT
  • Architecture: x86_64
  • Source Package: jwt-cli
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Jwt Cli
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: jwt-cli from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
pacman95%

jwt-cli 6.2.0-1

A super fast CLI tool to decode and encode JWTs

https://github.com/mike-engel/jwt-cli

sudo pacman -S jwt-cli
  • License: MIT
  • Architecture: x86_64
  • 1 dependencies
  • normalized package name match
  • Matched by: Jwt Cli
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: jwt-cli from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
MacPorts95%

jwt-cli

sudo port install jwt-cli
  • normalized package name match
  • Matched by: Jwt Cli
MacPorts ports tree · api.github.com · MacPorts ports tree: devel/jwt-cli/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Scoop95%

main/jwt-cli

scoop install main/jwt-cli
  • normalized package name match
  • Matched by: Jwt Cli
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/jwt-cli.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
Debian apt92%

jwt 5.0.0+really4.5.2-1+b2

golang implementation of JSON Web Tokens (command line)

https://github.com/golang-jwt/jwt

sudo apt install jwt
  • Section: golang
  • Architecture: amd64
  • Source Package: golang-github-golang-jwt-jwt
  • 1 dependencies
  • installed executable or alias match
  • Matched by: Jwt
Debian stable package indexes · deb.debian.org · Debian stable package indexes: jwt from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Ubuntu apt92%

jwt 5.0.0+really4.5.0-1

golang implementation of JSON Web Tokens (command line)

https://github.com/golang-jwt/jwt

sudo apt install jwt
  • Section: universe/golang
  • Architecture: amd64
  • Source Package: golang-github-golang-jwt-jwt
  • 1 dependencies
  • installed executable or alias match
  • Matched by: Jwt
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: jwt from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • rustBuild dependency declared by Homebrew.

Same workflow

  • jwt-hackShares av.db curated category or tags: cli, jwt, security, token.
  • cargo-auditShares av.db curated category or tags: cli, rust, security.
  • cargo-denyShares av.db curated category or tags: cli, rust, security.
  • cargo-geigerShares av.db curated category or tags: cli, rust, security.
  • checkpwnShares av.db curated category or tags: cli, rust, security.
  • feludaShares av.db curated category or tags: cli, rust, security.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment