hahwul/jwt-hack ? reverse-engineered prompt

Build me a fast Rust command line tool for working with JWTs and JWEs. I want to be able to decode tokens, encode new ones from JSON, verify signatures with either a secret or a key file, and try common cracking methods like wordlist and brute force. It should also help me test for weak JWT setups by generating attack payloads, like algorithm confusion, kid injection, jku and x5u issues, missing claims, and signature tricks.

Please add a scan mode that can take a token and check for common security problems automatically, then print clear results in a way that is easy to use during bug bounty work. It would be great if it could also run as a local API server for automation, and if there is an MCP mode for AI tools, keep that working too. If you need to check anything, look up the current docs online.