stripecheckup
Scan pasted Stripe webhook/checkout code for common integration bugs.
- 1.0.0
- Version
- remote
- Transport
- 1
- Tools
Security review
Review passedReviewed 1d ago.
- tools: 1 tools scanned
- metadata: scanned
No findings.
Tools (1)
check_stripe_code
Paste Stripe integration source code (a webhook handler, a checkout-session-creation route, or both concatenated) and get back pattern-based findings for the most common integration bugs: missing webhook signature verification, missing customer.subscription.updated handling (the single most common bug -- dunning marks a subscription past_due/unpaid, not canceled, so a handler that only reacts to .deleted leaves non-paying customers with access forever), missing checkout metadata/client_reference_id, and premature customer creation. This is regex pattern matching over text, not a real parser -- treat a clean result as 'didn't find a problem', not a guarantee. Nothing pasted is stored.