Stripe webhook receiver (inbound only)

Inbound Stripe webhook endpoint. Requires a valid Stripe-Signature header; the body is verified against the configured secret and must resolve to a signed owner (clerk:...). Unrecognized/unverifiable events return 200 {received: true} without side effects. The gateway does NOT send outbound webhooks. Body limit 262,144 bytes.

POST/v1/payments/stripe/webhook

Header parameters

Stripe-Signaturestringrequired

Request body

requiredapplication/json

object

Responses

200

Event accepted

receivedboolean

400

stripe_signature_required or invalid_owner

codestringrequired

Allowed:owner_requiredagent_mismatchidempotency_requiredinvalid_inputstripe_signature_requiredpayment_unavailable

statusintegerrequired

413

invalid_input (body too large)

codestringrequired

Allowed:owner_requiredagent_mismatchidempotency_requiredinvalid_inputstripe_signature_requiredpayment_unavailable

statusintegerrequired

503

payment_unavailable

codestringrequired

Allowed:owner_requiredagent_mismatchidempotency_requiredinvalid_inputstripe_signature_requiredpayment_unavailable

statusintegerrequired

Request

curl -X POST 'https://api.agentsub.dev/v1/payments/stripe/webhook' \
  -H 'Stripe-Signature: string' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{}'

const response = await fetch("https://api.agentsub.dev/v1/payments/stripe/webhook", {
  method: "POST",
  headers: {
    "Stripe-Signature": "string",
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: "{}"
});

import requests

response = requests.post(
    "https://api.agentsub.dev/v1/payments/stripe/webhook",
    headers={
        "Stripe-Signature": "string",
        "Accept": "application/json",
        "Content-Type": "application/json"
    },
    data="{}",
)

Response

{
  "received": true
}

{
  "code": "owner_required",
  "status": 0
}

{
  "code": "owner_required",
  "status": 0
}

{
  "code": "owner_required",
  "status": 0
}