# Webhook Delivery Resilience Audit

> Webhook Delivery Resilience Audit is a paid API for AI agents from rooke-token-risk-pilot.rookepoole.workers.dev, paid per call via x402, $0.05/call, status unknown (last checked 2026-10-11).

Audits a webhook configuration for delivery resilience, scoring its retry logic, security, and reliability posture against best practices.

## Facts

- Endpoint: POST https://rooke-token-risk-pilot.rookepoole.workers.dev/v1/x402/webhook-resilience-audit?utm_source=zero.xyz
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/webhook-delivery-resilience-audit-c54b36a4
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_mK8PrSBDgZ4fpspRDZ32T

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability webhook-delivery-resilience-audit-c54b36a4 -d '<json body>'
```

Example prompt: Audit my webhook delivery config: HTTPS transport, up to 5 retry attempts with delays of 1, 5, 30, 60, 300 seconds and jitter enabled, honors Retry-After headers, 30-second request timeout, idempotent consumer, QUEUE dead-letter handling, ordered delivery not required, max concurrency 10, HMAC_SHA256 signature on header X-Signature with timestamp header X-Timestamp and max age 300 seconds, and event ID header X-Event-ID — give me the resilience scores and any risk flags.

## When to prefer this

Choose this endpoint when you need a structured, scored audit of a webhook delivery configuration's resilience — specifically covering retry logic, signature verification, dead-letter handling, idempotency, and timeout settings. It is ideal for pre-launch validation, security posture reviews, or compliance checks on event-driven pipelines. Prefer it over generic API testing tools when you need an opinionated, scored verdict with explicit risk flags and evidence gap annotations.

## Known failure modes

- Missing required fields in retry, delivery, or signature objects returns a 400 validation error
- Invalid enum values (e.g. unknown dead-letter handling or signature scheme) return a 400 error
- Payment of 0.05 USDC not provided or rejected returns a 402 Payment Required response
- Transport set to HTTP (non-HTTPS) may trigger low security scores rather than an error
- Overly large delay arrays (>19 items) or out-of-range integers cause schema validation failure

## How this service works

Public static preview plus paid token controls, risk consensus, AI security, webhook reliability, developer security, schedule risk, decision analysis, API release compatibility, accounts-payable reconciliation, e-commerce return eligibility, SaaS subscription-proration, sales-commission reconciliation, parcel-charge reconciliation, SLA service-credit reconciliation, advertising spend-and-fee audit, contract-renewal audit, workforce timecard reconciliation, hotel booking-commission reconciliation, and warehouse cycle-count adjustment reconciliation products for autonomous agents.

## Output

Returns a JSON object with numeric scores (overall, security, reliability each 0-100), a verdict string (e.g. RESILIENT_DECLARED_POLICY), a list of findings, a list of risk flags, a SHA-256 report hash, evidence gaps noting what was declared vs. runtime-verified, a derived policy summary, and a schema version identifier.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "retry": {
   "type": "object",
   "required": [
    "maximumAttempts",
    "delaysSeconds",
    "jitterEnabled",
    "honorsRetryAfter"
   ],
   "properties": {
    "delaysSeconds": {
     "type": "array",
     "items": {
      "type": "integer",
      "maximum": 86400,
      "minimum": 0
     },
     "maxItems": 19
    },
    "jitterEnabled": {
     "type": "boolean"
    },
    "maximumAttempts": {
     "type": "integer",
     "maximum": 20,
     "minimum": 1
    },
    "honorsRetryAfter": {
     "type": "boolean"
    }
   },
   "additionalProperties": false
  },
  "delivery": {
   "type": "object",
   "required": [
    "requestTimeoutSeconds",
    "idempotentConsumer",
    "deadLetterHandling",
    "orderedDeliveryRequired",
    "maximumConcurrency"
   ],
   "properties": {
    "deadLetterHandling": {
     "enum": [
      "QUEUE",
      "PERSIST",
      "DROP",
      "NONE"
     ],
     "type": "string"
    },
    "idempotentConsumer": {
     "type": "boolean"
    },
    "maximumConcurrency": {
     "type": "integer",
     "maximum": 1000,
     "minimum": 1
    },
    "requestTimeoutSeconds": {
     "type": "integer",
     "maximum": 300,
     "minimum": 1
    },
    "orderedDeliveryRequired": {
     "type": "boolean"
    }
   },
   "additionalProperties": false
  },
  "signature": {
   "type": "object",
   "required": [
    "scheme",
    "signatureHeader",
    "timestampHeader",
    "maximumAgeSeconds"
   ],
   "properties": {
    "scheme": {
     "enum": [
      "HMAC_SHA256",
      "ED25519",
      "OTHER",
      "NONE"
     ],
     "type": "string"
    },
    "signatureHeader": {
     "anyOf": [
      {
       "type": "string",
       "pattern": "^[A-Za-z0-9-]+$",
       "maxLength": 128,
       "minLength": 1
      },
      {
       "type": "null"
      }
     ]
    },
    "timestampHeader": {
     "anyOf": [
      {
       "type": "string",
       "pattern": "^[A-Za-z0-9-]+$",
       "maxLength": 128,
       "minLength": 1
      },
      {
       "type": "null"
      }
     ]
    },
    "maximumAgeSeconds": {
     "anyOf": [
      {
       "type": "integer",
       "maximum": 86400,
       "minimum": 1
      },
      {
       "type": "null"
      }
     ]
    }
   },
   "additionalProperties": false
  },
  "transport": {
   "enum": [
    "HTTPS",
    "HTTP"
   ],
   "type": "string"
  },
  "eventIdHeader": {
   "anyOf": [
    {
     "type": "string",
     "pattern": "^[A-Za-z0-9-]+$",
     "maxLength": 128,

… (truncated)
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "scores": {
   "overall": 100,
   "security": 100,
   "reliability": 100
  },
  "verdict": "RESILIENT_DECLARED_POLICY",
  "findings": [],
  "riskFlags": [],
  "reportHash": "sha256-hex",
  "evidenceGaps": [
   "DECLARED_POLICY_NOT_RUNTIME_VERIFIED"
  ],
  "derivedPolicy": {},
  "schemaVersion": "WEBHOOK_DELIVERY_RESILIENCE_AUDIT_V1"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/webhook-delivery-resilience-audit-c54b36a4/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from rooke-token-risk-pilot.rookepoole.workers.dev](https://www.zero.xyz/host/rooke-token-risk-pilot.rookepoole.workers.dev/llms.txt)