# agent402.tools Webhook Debug

> agent402.tools Webhook Debug is a paid API for AI agents from agent402.tools, paid per call via x402, $0.05/call, status unknown (last checked 2026-09-14).

Validates an inbound webhook by pretty-printing its payload, decoding any JWT auth header, and verifying the HMAC signature against the raw body

## Facts

- Endpoint: POST https://agent402.tools/api/skill/webhook-debug
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agent402-tools-webhook-debug-ed6b0f6d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_eGe2jz-XEQodAvTBpVI8b

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agent402-tools-webhook-debug-ed6b0f6d -d '<json body>'
```

Example prompt: I just received a webhook from our payment provider — the raw body is '{"event":"payment.completed","id":"evt_123"}' and the signing secret from the dashboard is 'whsec_abc123xyz'. Can you verify the HMAC signature, decode the JWT auth header, and confirm it's safe and authentic?

## When to prefer this

Use this endpoint when you need a bundled, one-call solution to fully authenticate and inspect an inbound webhook — combining HMAC verification, JWT decoding, and payload pretty-printing in a single request. Prefer this over building your own validation pipeline when speed and reliability matter more than customization.

## Known failure modes

- Invalid or malformed raw body JSON — returns parse error
- Missing or incorrect signing secret — HMAC verification fails with mismatch error
- Missing JWT header — JWT decode step is skipped or returns null
- Signature mismatch — returns invalid signature with expected vs received values
- Malformed JWT — returns decode error with details

## How this service works

Bundled execution of the Webhook debug workflow - A webhook hit your endpoint and you need to confirm it's authentic, valid, and safe to log. Pretty-print the payload, decode any JWT auth header, verify the HMAC signature against the raw body, sch...

## Output

Returns a structured response containing the pretty-printed webhook payload, the decoded JWT (if present in the auth header), the HMAC signature verification result (valid/invalid), and an overall assessment of whether the webhook is authentic and safe to process.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "rawBody": {
   "type": "string",
   "description": "the raw webhook body as received on the wire (single-line JSON string)"
  },
  "signingSecret": {
   "type": "string",
   "description": "the shared webhook signing secret from the provider dashboard"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "args": {
   "rawBody": "{\"id\":\"evt_3O2eYxL5d8\",\"type\":\"checkout.session.completed\",\"created\":1750982400,\"data\":{\"object\":{\"id\":\"cs_test_a1b2c3\",\"customer_email\":\"alice@example.com\",\"amount_total\":4999,\"client_ip\":\"203.0.113.42\",\"success_url\":\"https://app.example.com/orders/cs_test_a1b2c3\"}}}",
   "signingSecret": "whsec_demo_secret_do_not_use"
  },
  "pack": "webhook-debug",
  "steps": [
   {
    "ok": true,
    "slug": "json-format",
    "result": {}
   },
   {
    "ok": true,
    "slug": "jwt-decode",
    "result": {}
   },
   {
    "ok": true,
    "slug": "hmac",
    "result": {}
   },
   {
    "ok": true,
    "slug": "json-validate",
    "result": {}
   },
   {
    "ok": true,
    "slug": "time-convert",
    "result": {}
   },
   {
    "ok": true,
    "slug": "redact",
    "result": {}
   },
   {
    "ok": true,
    "slug": "extract-entities",
    "result": {}
   }
  ],
  "summary": "7/7 steps succeeded"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agent402-tools-webhook-debug-ed6b0f6d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agent402.tools](https://www.zero.xyz/host/agent402.tools/llms.txt)