AgentWeb Webhooks and Verification

AgentWeb uses webhooks and verification artifacts so agents can distinguish a started payment, a completed payment, and a verified business action.

Webhook endpoints

• POST /api/billing/webhook receives Stripe events. It verifies Stripe-Signature before applying or revoking entitlements.
• POST /telemetry/agent-event records public agent attribution events. It does not store raw prompts, payment credentials, or private customer payloads.

Agent rules

• External agents must not call Stripe webhooks directly.
• Checkout redirects are not proof of entitlement.
• Completed actions should return a verification artifact with source, timestamp, status, evidence, signature metadata, and failure class.

Payment schemas: payment authority, payment artifact, and agent commerce metadata.