{"slug":"sicher-halowerk-com-v1-webhook-signature-60df0ec4","name":"sicher.halowerk.com/v1/webhook-signature","summary":"Providers each build their signing string differently — some sign only the body, others prepend a timestamp, an id, or a version marker in a fixed order — and getting that order wrong produces a mismatch that looks exactly like an attack. This checks the signature the way the named provider actually specifies, with constant-time comparison, and returns the string that was signed so a mismatch can be debugged instead of guessed at.","status":"live","indexable":true,"listed_since":"2026-10-25T17:57:17.875038Z","sources":[{"source":"x402_bazaar","external_id":"https://sicher.halowerk.com/v1/webhook-signature","owner_address":"0x2880edfff13100677bf97a3cbdf3bc34771c4e5e","seen_at":"2026-10-27T21:43:58.276822Z","removed_at":null}],"endpoints":[{"url":"https://sicher.halowerk.com/v1/webhook-signature","host":"sicher.halowerk.com","protocol":"x402","state":"live","last_probe_at":"2026-10-28T03:38:34.913651Z","last_ok_at":"2026-10-28T03:38:34.913651Z","tools_count":null,"tools_changed_at":null,"uptime_24h":1.0,"uptime_30d":1.0}],"also_listed_as":[{"slug":"sicher-halowerk-com-267ab3e2","name":"sicher.halowerk.com"}],"payment_options":[{"endpoint_url":"https://sicher.halowerk.com/v1/webhook-signature","network":"eip155:8453","scheme":"exact","rail":"exact","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","coin":"USDC","asset_label":"USD Coin","amount":"2000","pay_to":"0x2880edfff13100677bf97a3cbdf3bc34771c4e5e","observed_at":"2026-10-28T03:38:34.913651Z"}],"usage":{"source":"x402_bazaar","unique_payers_30d":3,"paid_calls_30d":3,"last_paid_at":"2026-10-08T05:40:41.242Z","reported_at":"2026-10-27T21:43:58.276822Z"},"assessment":{"method":"2026.10.2","checks":[{"id":"answers","state":"pass","reason":"Answered a check 13 hours ago."},{"id":"owner","state":"fail","reason":"No one has proven control of its domain or of the wallet it is paid at."},{"id":"track_record","state":"fail","reason":"Listed for 2 days; 30 are needed."},{"id":"real_customers","state":"fail","reason":"3 different wallets paid it in 30 days, as the x402 Bazaar reports (not yet counted by addrbook); 10 are needed."},{"id":"clean_scan","state":"not_applicable","reason":"Not an MCP server."}],"passed":1,"applicable":4,"contradicted":false,"computed_at":"2026-10-28T00:41:41.848192Z"},"identity":{"endpoint_domains":["halowerk.com"],"proven_domains":[],"proven_wallets":[],"namesakes":[],"namesake_count":0,"identity_checks":[],"wallet_attestations":[],"human_backings":[]},"replies":[],"customers":null,"scan":null,"notice":"Not affiliated with addrbook — claim or request removal."}