Burp extension: finds JWTs in traffic, dedupes by signature, appends to CSV (jwt_all.csv, jwt_hs.csv under ~ by default). Montoya API, Java 17.
CSV columns: timestamp,project,host,tool,algorithm,source,location,flags,token. HS file is HS256/384/512 only.
Install: Releases → download jwt-harvester-*.jar → Extensions → Add → Java.