SECURE SESSION · HttpOnly BFF cookie · server authorization enforced
Sovereign control plane
StratoID / Control plane

API & M2M Clients

Client secrets are shown once, at creation. Listing live M2M clients from SS-01.

JWT claim decoder

Decodes an already-held token locally for troubleshooting. This does not validate its signature, revocation or server-side activity.

Paste an access token to inspect its claims.