Overview
The corsa-webhook-debugging skill adds Corsa webhook knowledge to your coding tool (Cursor, Claude Code, VS Code, etc.) so it can help you troubleshoot webhook integrations. It covers signature verification, delivery mechanics, event types, and common failure patterns.What It Helps With
- Diagnosing signature verification failures
- Identifying why events are not being received
- Handling duplicate deliveries with idempotency keys
- Setting up correct Express/Node.js webhook handlers
- Understanding Corsa’s delivery behavior (timeouts, retries, URL restrictions)
Quick Start
After installing the skill, ask your coding tool questions like:- “My Corsa webhook signature verification keeps failing”
- “I’m not receiving any webhook events from Corsa”
- “How do I handle duplicate webhook deliveries?”
- “Set up a webhook handler with proper signature verification”
- “What headers does Corsa send with webhooks?”
What the Skill Knows
Signature Verification
- HMAC SHA256 over the raw request body — format:
sha256=<hex> - Header:
x-hub-signature-256 - Why
express.raw()is required (re-stringified JSON differs from original bytes) verifyWebhookSignatureis synchronous (returnsboolean, not aPromise)- Constant-time comparison via
crypto.timingSafeEqual
Delivery Behavior
All Webhook Headers
All 32 Event Types
Individual clients, corporate clients, alerts, cases, transactions, deposits, withdrawals, trades, individual members, corporate members, blockchain wallets, bank accounts, and payment accounts — each with.created and .updated variants (26 events). Checklists fire .created and .updated (2 events). Attachments fire .created, .updated, and .deleted (3 events). Forms fire form_template.public_form_submitted (1 event).
Payload Structure
- Created events:
type,timestamp,data.id,data.referenceId,data.entity - Updated events:
type,timestamp,data.id,data.referenceId,data.updated,data.previousValues
Common Failures It Diagnoses
Source
GitHub Repository
View the full skill source with detailed debugging guides and code examples.