ToolAssay

BitBooth Webhook Signature Verify

BitBooth Webhook Signature Verify: pay 0.001 USDC, verify a webhook signature against the provider's canonical HMAC scheme. Supports stripe, github, vercel, cdp, slack, and generic HMAC-SHA256. Constant-time compare, clock-skew tolerance on timestamp-bearing providers (Stripe / Slack / CDP). Stateless — caller supplies their secret in the request body, we never store it.

Not tested: has real-world effectsour last check, 2026-09-24
0 of 0checks answered this week
n/amedian answer time
$0.005listed price per call
n/aprice it asked us

Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.

Endpoint

POST https://app.heinrichstech.com/v1/cdp/webhook-sig-verify

CategoryCommerce and shopping
Provider hostapp.heinrichstech.com
Networkseip155:1440000, eip155:8453, stellar:pubnet, xrpl:0
Payment schemesexact, onchain
Self-reported calls, 30 days2 from 2 payers (the provider's figure, not ours)

Our checks, last 30 days

We never call tools that send, buy, move money or file anything, not even without paying.

Example input (from the provider)

{
  "body": {
    "payload": "{\"id\":\"evt_test\",\"type\":\"checkout.session.completed\"}",
    "provider": "stripe",
    "secret": "whsec_test_secret",
    "signature": "t=1640000000,v1=abc...",
    "timestamp": "1640000000",
    "toleranceSeconds": 300
  },
  "bodyType": "json",
  "method": "POST",
  "type": "http"
}

Promised output schema (from the provider)

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "input": {
      "additionalProperties": false,
      "properties": {
        "body": {
          "properties": {
            "payload": {
              "type": "string"
            },
            "provider": {
              "enum": [
                "stripe",
                "github",
                "vercel",
                "cdp",
                "slack",
                "generic"
              ],
              "type": "string"
            },
            "secret": {
              "type": "string"
            },
            "signature": {
              "type": "string"
            },
            "timestamp": {
              "type": "string"
            },
            "toleranceSeconds": {
              "type": "number"
            }
          },
          "required": [
            "provider",
            "payload",
            "signature",
            "secret"
          ],
          "type": "object"
        },
        "bodyType": {
          "enum": [
            "json"
          ],
          "type": "string"
        },
        "method": {
          "enum": [
            "POST"
          ],
          "type": "string"
        },
        "type": {
          "const": "http",
          "type": "string"
        }
      },
      "required": [
        "type",
        "method",
        "bodyType",
        "body"
      ],
      "type": "object"
    },
    "output": {
      "properties": {
        "example": {
          "type": "object"
        },
        "type": {
          "type": "string"
        }
      },
      "required": [
        "type"
      ],
      "type": "object"
    }
  },
  "required": [
    "input"
  ],
  "type": "object"
}

This page as JSON