Resizes

Webhooks

Stripe webhooks drive subscription and token purchase state.

Resizes AI exposes a single inbound webhook endpoint for Stripe. Configure your Stripe dashboard (or Stripe CLI in local dev) to send events to POST /api/stripe/webhook.

  • Verify signatures with STRIPE_WEBHOOK_SECRET
  • Idempotent handling for checkout.session.completed and subscription events
  • Metadata on Checkout Sessions links payments to organization and agent
Do not expose the webhook URL without signature verification. Rotate webhook secrets if compromised.