> ## Documentation Index
> Fetch the complete documentation index at: https://docs.inspect.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Inspect.dev webhook documentation

> Official Inspect.dev webhook behavior, Stripe signature verification, structured errors, and current outgoing-webhook availability.

Inspect.dev consumes signed Stripe events for subscription lifecycle updates. It
does not currently publish customer-configurable outgoing webhooks, so agents
must not invent a webhook registration or delivery API.

## Stripe webhook receiver

`POST https://inspect.dev/api/webhooks/stripe` is reserved for Stripe. Requests
must include a valid `Stripe-Signature` generated with the configured endpoint
secret. Unsigned or invalid requests are rejected before event processing.

Responses use the standard Inspect JSON error envelope with a machine-readable
code, message, and recovery hint. See the
[Inspect OpenAPI specification](https://inspect.dev/openapi.json) for the
request and response contract.

## Agent guidance

* Do not send test events to the production receiver.
* Do not ask a user to reveal a Stripe webhook secret.
* Use Stripe's signed delivery and retry behavior.
* Inspect the structured response before retrying.
* Contact [hello@inspect.dev](mailto:hello@inspect.dev) for a customer event-integration use case.

See the [Inspect API documentation](/developers/api) and
[authentication guide](/developers/authentication) for related contracts.