IconVault's GitHub Token Validator checks a personal access token (classic ghp_ or fine-grained) by calling GitHub's own /user endpoint. In seconds you learn whether the token is valid, which account it belongs to, which OAuth scopes it grants and how much API rate limit remains, so you can confirm a token works before pasting it into CI or a deploy pipeline.

The validation request goes directly from your browser to GitHub. The token lives in memory only and is never saved, logged or sent to our servers, and the Clear button wipes it instantly. It is free to use with no signup. The honest caveat: this tool cannot tell you why a token was revoked or when it expires, and it checks only the token you paste, it never touches your GitHub password or 2FA.