Hookproof

Free Stripe event diagnostics and route scaffolding for Next.js App Router.

Hookproof helps developers catch webhook reliability failures before a payment event reaches production. The free core parses Stripe event envelopes, identifies traceability gaps, and generates signature-verifying route scaffolds.

Why

Stripe retries deliveries. Next.js can mutate request bodies. Vercel environments can carry the wrong endpoint secret. A success redirect is not payment fulfillment. Hookproof makes those failure modes visible.

Use the free core

git clone https://github.com/anxiety-design/hookproof.git
cd hookproof
npm install
npm test
npm run build

import { parseEvent, analyzeEvent } from "./src/analyze.js";
const result = analyzeEvent(parseEvent(rawJson));
console.log(result.score, result.warnings);

Production kit

The optional 5 USDC Hookproof Stripe Reliability Kit adds:

• typed, tested webhook dispatch;
• persistent Postgres and Upstash idempotency patterns;
• Checkout, invoice, and subscription examples;
• retry, duplicate, signature, and handler-failure fixtures;
• Next.js + Vercel deployment runbook;
• commercial use in unlimited purchaser-owned projects.

The paid kit supports two independent Base USDC checkout rails:

• Browser wallets: connect Coinbase Wallet or MetaMask, approve 5 USDC, and receive the ZIP after on-chain verification.

• Autonomous agents: call the x402 v2 endpoint; payment settles and the response is the ZIP.

• Buy with a browser wallet: https://hookproof-kit.vercel.app/purchase

• Product: https://hookproof-kit.vercel.app

• x402 endpoint: https://hookproof-kit.vercel.app/api/download

• Verified x402scan listing: https://www.x402scan.com/server/668f9f40-752d-4a84-b243-b151c527f27c

Privacy

The hosted diagnostic runs entirely in the browser. Hookproof does not upload or store pasted event payloads.

License

MIT for this free repository. The separately purchased kit has its own commercial-use license.