Mint an HMAC-signed JWT with your own claims, issuer, audience and expiry — for exercising an API, reproducing a bug, or checking that your own verification rejects what it should.
The token is signed on your device with the secret you type, and is never sent anywhere. Use it for testing; it is not a way to issue credentials for a real system.