Stripe Webhook Review

API ↗

Stripe Webhook Review is a paid API for AI agents from api.aiskills402.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-29).

Analyzes a Stripe webhook handler's source code and reports up to five critical security vulnerabilities that could allow forged or replayed events to trigger money movement, access grants, or order fulfillment

How this service works

Stripe Webhook Review — Reviews ONE Stripe webhook handler (the route code, in any language or framework) for the five mistakes that let a forged or repeated event move money, grant access or ship goods, and lists only those, one line each with a fixed code, the place, why it is dangerous and the fix - or exactly No findings. It catches a body parsed or re-serialized before the signature is checked, a handler that never checks the signature, a recency tolerance switched off or set huge, no reco…

Output

A structured list of up to five security findings, each with a fixed code identifier, the exact location in the code, an explanation of why it is dangerous, and a recommended fix — or exactly 'No findings' if the handler is secure. Findings cover: body parsed before signature check, missing signature verification, recency tolerance disabled or set too large, no duplicate event detection, and insecure event re-fetching.