Execution evidence

Authenticate a Stripe event and trigger caller-independent reconciliation

Validates the bounded raw request body with the active connection's Stripe webhook secret, enforces timestamp tolerance and deduplicates the Stripe event ID. The webhook remains an authenticated scheduling hint rather than settlement proof: MandateShield performs a separate Stripe API lookup and exact account, environment, PaymentIntent, amount, received amount, currency, PaymentMethod, capture and confirmation modes, card method, merchant, receipt, request-ID, payee metadata and permit-body-digest binding before terminal evidence can be verified.

post/api/v2/provider-webhooks/stripe/{connectionId}

Request

  • Base URL: https://mandateshield.com
  • URL: https://mandateshield.com/api/v2/provider-webhooks/stripe/{connectionId}
  • Auth: none declared. Required headers: Stripe-Signature

Path parameters

connectionIdstring required

Headers

Stripe-Signaturestring required

Request body

object required

Bounded Stripe Event JSON. Its signature is checked over the exact raw bytes before parsing.

Response

The signed event was accepted, deduplicated if necessary, and reconciliation completed or remains pending

receivedunknown required
relevantboolean required
idempotent_replayboolean
reconciliationobject
reconciliation_pendingunknown

Changes

No recorded changes to this operation across all 1 revision of this API.