addrbookFor publishers
← The evidence ledger

Evidence row 54823

Observed , by sync.x402_bazaar/1.

Kind
listing
About
source_record x402_bazaar:https://app.heinrichstech.com/v1/cdp/webhook-sig-verify
Recorded
Previous row
None: the first of its kind about this subject
Body SHA-256
5ed18a83b7ff838838901ce93d4eeb5f58ef2188c7a70e1beee9a63296a4b322
Leaf
0xa22e87b4d735399bdd319655aee4b6b275b78c916130845162924376e21794e3

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://app.heinrichstech.com/v1/cdp/webhook-sig-verify"
    ]
  ],
  "name": "app.heinrichstech.com/v1/cdp/webhook-sig-verify",
  "owner_address": "0xda2f35d283c42dd60b965322394bc658a5c1769f",
  "raw": {
    "accepts": [
      {
        "amount": "5000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 120,
        "network": "eip155:8453",
        "payTo": "0xDa2F35d283c42dd60B965322394bc658a5c1769F",
        "resource": "https://app.heinrichstech.com/v1/cdp/webhook-sig-verify",
        "scheme": "exact"
      },
      {
        "amount": "5000",
        "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
        "extra": {
          "feePayer": "D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM"
        },
        "maxTimeoutSeconds": 120,
        "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
        "payTo": "EDtPHNFA6ofGQZPb8NYUxdTkqVwCfkWJzRCg8vQXkYBL",
        "resource": "https://app.heinrichstech.com/v1/cdp/webhook-sig-verify",
        "scheme": "exact"
      },
      {
        "amount": "0.005000",
        "asset": "524C555344000000000000000000000000000000",
        "extra": {
          "invoiceId": "830fe318-a14b-4594-8c5d-3a5af9a75126",
          "issuer": "rMxCKbEDwqr76QuheSUMdEGf4B9xJ8m5De",
          "sourceTag": 804681468
        },
        "maxTimeoutSeconds": 120,
        "network": "xrpl:0",
        "payTo": "rfryheo6yzFdLWj8qUQtZc7zG9MKkBkUEy",
        "resource": "https://app.heinrichstech.com/v1/cdp/webhook-sig-verify",
        "scheme": "exact"
      },
      {
        "amount": "0.005000",
        "asset": "5553444300000000000000000000000000000000",
        "extra": {
          "invoiceId": "c840f901-f967-40ef-b2ef-30fd97478c1c",
          "issuer": "rGm7WCVp9gb4jZHWTEtGUr4dd74z2XuWhE",
          "sourceTag": 804681468
        },
        "maxTimeoutSeconds": 120,
        "network": "xrpl:0",
        "payTo": "rfryheo6yzFdLWj8qUQtZc7zG9MKkBkUEy",
        "resource": "https://app.heinrichstech.com/v1/cdp/webhook-sig-verify",
        "scheme": "exact"
      },
      {
        "amount": "50000",
        "asset": "USDC",
        "extra": {
          "currency": "USDC",
          "issuer": "GA5ZSEJYB37JRC5AVCIA5MOP4RHTM335X2KGX3IHOJAPP5RE34K4KZVN"
        },
        "maxTimeoutSeconds": 120,
        "network": "stellar:pubnet",
        "payTo": "GCB5WZT5VCBBATGMQMTB6TLUXD6KQC6N5ITRWK3CCP4J3YOCE45FA2GO",
        "resource": "https://app.heinrichstech.com/v1/cdp/webhook-sig-verify",
        "scheme": "exact"
      }
    ],
    "description": "BitBooth Webhook Signature Verify: pay 0.005 USDC, verify a webhook signature against the provider's canonical HMAC scheme. Supports stripe, github, vercel, cdp, slack, and generic HMAC-SHA256. Constant-time compare, clock-skew tolerance on timestamp-bearing providers (Stripe / Slack / CDP). Stateless — caller supplies their secret in the request body, we never store it.",
    "extensions": {
      "bazaar": {
        "category": "utility",
        "discoverable": true,
        "info": {
          "input": {
            "body": {
              "payload": "{\"id\":\"evt_test\",\"type\":\"checkout.session.completed\"}",
              "provider": "stripe",
              "secret": "whsec_test_secret",
              "signature": "t=1640000000,v1=abc...",
              "timestamp": "1640000000",
              "toleranceSeconds": 300
            },
            "bodyType": "json",
            "method": "POST",
            "type": "http"
          },
          "output": {
            "example": {
              "details": {
                "ageSeconds": 14,
                "checkedTolerance": true
              },
              "ok": true,
              "payment": {
                "network": "eip155:8453",
                "payer": "0xbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
                "transaction": "0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
              },
              "provider": "stripe",
              "scheme": "hmac-sha256-stripe",
              "valid": true
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "body": {
                  "properties": {
                    "payload": {
                      "type": "string"
                    },
                    "provider": {
                      "enum": [
                        "stripe",
                        "github",
                        "vercel",
                        "cdp",
                        "slack",
                        "generic"
                      ],
                      "type": "string"
                    },
                    "secret": {
                      "type": "string"
                    },
                    "signature": {
                      "type": "string"
                    },
                    "timestamp": {
                      "type": "string"
                    },
                    "toleranceSeconds": {
                      "type": "number"
                    }
                  },
                  "required": [
                    "provider",
                    "payload",
                    "signature",
                    "secret"
                  ],
                  "type": "object"
                },
                "bodyType": {
                  "enum": [
                    "json"
                  ],
                  "type": "string"
                },
                "method": {
                  "enum": [
                    "POST"
                  ],
                  "type": "string"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method",
                "bodyType",
                "body"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        },
        "tags": [
          "webhook",
          "hmac",
          "signature",
          "verify",
          "agent-dev"
        ]
      }
    },
    "lastUpdated": "2026-10-26T08:21:48.572Z",
    "quality": {
      "l30DaysTotalCalls": 4,
      "l30DaysUniquePayers": 2,
      "lastCalledAt": "2026-10-26T08:21:48.38Z"
    },
    "resource": "https://app.heinrichstech.com/v1/cdp/webhook-sig-verify",
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "BitBooth Webhook Signature Verify: pay 0.005 USDC, verify a webhook signature against the provider's canonical HMAC scheme. Supports stripe, github, vercel, cdp, slack, and generic HMAC-SHA256. Constant-time compare, clock-skew tolerance on timestamp-bearing providers (Stripe / Slack / CDP). Stateless — caller supplies their secret in the request body, we never store it."
}

What the leaf hashes

{"body":"5ed18a83b7ff838838901ce93d4eeb5f58ef2188c7a70e1beee9a63296a4b322","id":54823,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793025434055629,"prev":null,"subject":"x402_bazaar:https://app.heinrichstech.com/v1/cdp/webhook-sig-verify","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).

  1. 0xa22e69c983aeb5e748ec9d130ac408de09bf6781969f42b6c5e5784dccd3da9d
  2. 0x1ae8a7c372e5f7cf2c97fda21a7f5056b08aac70ac4dd8d69610fa9903b98750
  3. 0xc250d70d89a5da2aceaab39a96510583200bf83fb63e2f8dff238dd50ebac6f1
  4. 0xf6bed6a1376807b053a3e815be3fd02051f822604afeb667b131bc6b0be775eb
  5. 0x08f51d8851864d64c7dd92404756c9da945da7eb1443a0cdb28ba6c08d5d25c6
  6. 0x3d5bf8c1953689971b49386b90aba882e6a7053c84948ba2f12851636189e791
  7. 0x599dfb25a6c00e7d329b70a7b7ca079197f6277376424d9e7e4bdc2eb2b675f2
  8. 0x5f43d57237770f96f15e160f29752ef8cf4064f1696413d19f52d81f3cbebff0
  9. 0xe67eecaf696e494561ce621c14fc42e62336d45f7309ad0195e652382fb489a9
  10. 0x9f737f37530f83ae6928a14e73e114762b12b3c82ceb7028bdaf78f27b288ea9
  11. 0x9ca444fcd24e94bee95de2e8d69f385e59ecdaff6c1b017632bff037809c381b
  12. 0x95576cc3dd18642c859f679cefa1cf80bfc6c690b065916c3585b14e8ef4b1b3
  13. 0xf8d3e004d9a208d2c5e82ab676956d80f8a3c78387c61dad15a3a8269efee0d8
  14. 0x6713795704ddd9c528d421fadd9cc96b0200a4ddbba84f88e718d4968dde888b
  15. 0x62a900133713919f4eed33d8336876b7a6d538233b8a4f3ed03b29aa44f5bad0
  16. 0x1ac20d30773e1f4f2f811540e9a99b5cca9177c9e2e029acc0d80cf3f1d11f0f
  17. 0xd21942ae3214eff88e08ab04884fd4b11958b51af9a0741b7668e2d07a2c56c9
  18. 0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
  19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a
Day root
0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
Chained
0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
Published
On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae

How to check it · This row as JSON