Skip to main content
Inspect.dev consumes signed Stripe events for subscription lifecycle updates. It does not currently publish customer-configurable outgoing webhooks, so agents must not invent a webhook registration or delivery API.

​
Stripe webhook receiver

POST https://inspect.dev/api/webhooks/stripe is reserved for Stripe. Requests must include a valid Stripe-Signature generated with the configured endpoint secret. Unsigned or invalid requests are rejected before event processing. Responses use the standard Inspect JSON error envelope with a machine-readable code, message, and recovery hint. See the Inspect OpenAPI specification for the request and response contract.

​
Agent guidance

  • Do not send test events to the production receiver.
  • Do not ask a user to reveal a Stripe webhook secret.
  • Use Stripe’s signed delivery and retry behavior.
  • Inspect the structured response before retrying.
  • Contact hello@inspect.dev for a customer event-integration use case.
See the Inspect API documentation and authentication guide for related contracts.