x402 census · app.heinrichstech.com · 5828dce8c1e5 · JSON
POST /v1/cdp/webhook-sig-verify
unprobed
BitBooth Webhook Signature Verify: pay 0.001 USDC, verify a webhook signature against the provider's canonical HMAC scheme. Supports stripe, github, vercel, cdp, slack, and generic HMAC-SHA256. Constant-time compare, clock-skew tolerance on timestamp-bearing providers (Stripe / Slack / CDP). Stateless — caller supplies their secret in the request body, we never store it.
Verdict: not verified by an unpaid GET. not probed yet. This says nothing about whether the route works when called as declared.
Facts from the catalogs
| Field | Value |
|---|---|
| URL | https://app.heinrichstech.com/v1/cdp/webhook-sig-verify |
| Method | POST |
| Price | $0.005 USDC = 5000 atomic units of 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 |
| Network | eip155:8453 (base); also accepts xrpl:0, stellar:pubnet, eip155:1440000 |
| payTo | 0xDa2F35d283c42dd60B965322394bc658a5c1769F |
| Seller | app.heinrichstech.com |
| Catalogs | cdp (row updated 2026-09-07) |
| Listed since (lower bound) | 2026-09-07 (earliest catalog timestamp; catalogs report last-update times only) |
| Last catalog update | 2026-09-07 |
| CDP quality counters | 2 calls and 2 unique payers in 30 days, last call 2026-09-07 (catalog-reported, not verified on chain) |
| Category (keyword rule) | other/unknown |
| Templated path | no |
| x402Version in catalog | 2 |
| Service name / tags | none |
Unpaid probe (census of )
| Field | Value |
|---|---|
| Probe | not probed in this build |
No hourly re-probe has reached this resource yet; the cron covers a rotating slice of 150 per hour.
On-chain facts for the payTo (public address)
| Field | Value |
|---|---|
| Distinct payers | 11 |
| Payments | 17 |
| USDC volume | $0.05 |
| Median payment | $0.001 |
| First / last payment | 2026-07-02 / 2026-09-17 |
| Sampler-shaped share of payments | 100.0% |
| Payers that are not samplers | 0 |
| Source | forensics-2026-09-30 |
| Address | 0xDa2F35d283c42dd60B965322394bc658a5c1769F (contract: EIP7702StatelessDeleGator) |
Declared input and output (extensions.bazaar)
{
"input": {
"body": {
"payload": "{\"id\":\"evt_test\",\"type\":\"checkout.session.completed\"}",
"provider": "stripe",
"secret": "whsec_test_secret",
"signature": "t=1640000000,v1=abc...",
"timestamp": "1640000000",
"toleranceSeconds": 300
},
"bodyType": "json",
"method": "POST",
"type": "http"
},
"output": {
"type": "json",
"example": {
"details": {
"ageSeconds": 14,
"checkedTolerance": true
},
"ok": true,
"payment": {
"network": "eip155:8453",
"payer": "0xbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
"transaction": "0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
},
"provider": "stripe",
"scheme": "hmac-sha256-stripe",
"valid": true
}
}
}
Try it (unpaid: shows the 402)
curl -si -X POST 'https://app.heinrichstech.com/v1/cdp/webhook-sig-verify' -H 'accept: application/json' -H 'content-type: application/json' --data '{}'
The catalog declares POST. A 402 answer carries the payment requirements in the JSON body and, for x402 v2, base64 in the PAYMENT-REQUIRED header. This page never sends a payment.
Paid checks (x402, USDC on Base)
GET https://bazaar.agentexchange.work/r/5828dce8c1e5/probe.json re-runs this probe right now for $0.01 and writes the result here. POST https://bazaar.agentexchange.work/featured with {"id":"5828dce8c1e5"} places this resource at the top of the report and search pages for 30 days for $1.00, labelled. Unpaid requests answer 402 with the terms. Pricing.
Catalog references: agentic.market (CDP Bazaar front end) · this record as JSON · all resources on app.heinrichstech.com.