{"uid":"cap_ot4bvLknOg06rmC5IEH6w","slug":"webhook-signature-fixture-lab-95b1ec4d","name":"Webhook Signature Fixture Lab","description":"Customer-input analysis tools with per-call x402 v2 USDC payments on Base. Discovery and examples are free.","url":"https://mcp-factory.bowling-anthony.workers.dev/webhook-signature-fixture-lab/analyze","method":"POST","headers":{},"bodySchema":null,"responseSchema":{"type":"json","example":{"ok":true,"scope":"generated_fixtures_only","header":{"name":"X-Hub-Signature-256","value":"sha256=757107ea0eb2509fc211221cce984b8a37570b6d7586c22c46f4379c8b043e17"},"fixtures":[{"name":"valid","header":{"name":"X-Hub-Signature-256","value":"sha256=757107ea0eb2509fc211221cce984b8a37570b6d7586c22c46f4379c8b043e17"},"payload":"Hello, World!","expected_accepted":true,"expected_time_valid":null,"expected_signature_valid":true},{"name":"tampered_payload","header":{"name":"X-Hub-Signature-256","value":"sha256=757107ea0eb2509fc211221cce984b8a37570b6d7586c22c46f4379c8b043e17"},"payload":"Hello, World!!","expected_accepted":false,"expected_time_valid":null,"expected_signature_valid":false},{"name":"wrong_signature","header":{"name":"X-Hub-Signature-256","value":"sha256=057107ea0eb2509fc211221cce984b8a37570b6d7586c22c46f4379c8b043e17"},"payload":"Hello, World!","expected_accepted":false,"expected_time_valid":null,"expected_signature_valid":false}],"verification":null,"payload_sha256":"dffd6021bb2bd5b0af676290809ec3a53191dd81c7f70a4b28688a362182986f"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.03","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.03/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Dm9rkjNyyKLxwSUxusS-h","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.03","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Generates test fixtures for HMAC-SHA256 webhook signature verification, including valid, tampered, and wrong-signature cases","exampleAgentPrompt":"Generate webhook signature test fixtures for my payload 'Hello, World!' using my secret key — I need valid, tampered payload, and wrong signature cases so I can test my X-Hub-Signature-256 verification logic.","exampleUseCases":[{"title":"Webhook handler unit test suite","prompt":"I'm building a GitHub webhook handler and need test fixtures — generate valid, tampered, and wrong-signature test cases for the payload 'POST /deploy triggered' using my secret 'mysecretkey123' so I can write unit tests for my X-Hub-Signature-256 verification."},{"title":"Security regression testing for webhooks","prompt":"Before shipping my new webhook endpoint, can you generate a set of HMAC-SHA256 fixture cases for the payload '{\"event\":\"order.completed\",\"id\":42}' with secret 'prod-secret-abc' so I can confirm my signature validation rejects tampered and invalid signatures?"},{"title":"Debugging webhook signature mismatch","prompt":"My webhook receiver keeps rejecting valid signatures and I don't know why — can you generate fixture test cases for the payload 'user.created' with secret 'webhook-secret-xyz' so I can compare the expected sha256 hash against what my code produces?"}],"resultDescription":"Returns a JSON object containing: the generated X-Hub-Signature-256 header value, an array of named test fixtures (valid, tampered_payload, wrong_signature) each with their header, payload, and expected validation outcomes (expected_accepted, expected_signature_valid, expected_time_valid), a verification field, and the SHA-256 hash of the payload. Each fixture specifies whether it should be accepted and whether the signature is valid, enabling automated test assertions.","failureModes":["Missing or invalid payload body returns error","Missing secret key causes signature generation failure","Malformed request body results in 400-level error","Payment failure (x402) blocks call execution","Insufficient USDC balance prevents call from completing"],"whenToPreferThis":"Choose this endpoint when you need to generate comprehensive, ready-to-use HMAC-SHA256 webhook signature test fixtures — especially for GitHub-style X-Hub-Signature-256 verification. It is ideal for developers who want deterministic test vectors covering valid, tampered, and invalid signature scenarios without writing the crypto logic themselves. Prefer this over manual fixture creation when you need multiple edge-case scenarios in a single call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T18:35:03.918Z","isFirstParty":false}