OAuth Scope Analyzer - Decode Token Permissions

Analyze OAuth scopes and permissions from tokens or scope strings. Understand what access levels each scope grants. Private, browser-based tool.

Input

Paste JWT Token or Scope String

Enter scopes to analyze

Scopes define what permissions an OAuth token has. They specify which resources and actions the token can access, like 'read:user' or 'write:repos'.

Paste a JWT token, scope string, or space-separated list of scopes. The tool identifies common OAuth providers and explains what each scope allows.

Google, GitHub, Microsoft, Facebook, Twitter, Slack, Spotify, and many others. Unknown scopes are displayed with their raw values.

To understand what permissions an app is requesting, audit token access, debug authorization issues, or explain scopes to non-technical users.

Yes. All analysis happens in your browser. No tokens or scope data are sent to any server.

Yes. If you paste a JWT, the tool extracts the scope claim and analyzes it. It also shows other relevant claims like audience and issuer.

Custom scopes are displayed but may not have descriptions. You can still see the scope names and understand the structure.

Some scopes grant broad access like 'admin' or 'write:all'. The tool highlights potentially sensitive scopes for security review.

Different providers use different formats: 'read:user', 'user.read', 'https://graph.microsoft.com/.default'. This tool normalizes them for analysis.

Yes. Enter two sets of scopes to see what's added, removed, or common between them. Useful for reviewing scope changes.