Paste a JSON Web Token to inspect its header and payload. We never verify the signature server-side — everything is local.