Public webhook signature verifier

A browser-side tool at `/product/webhooks/verify` that confirms a webhook payload was actually sent by us. Paste the signature header and body, get a green check or a precise reason it failed.

If you wire Last Price into your stack, you receive signed webhooks for proposals, price changes, and approvals. The new public verifier lets you (or your AI agent) check a signature without writing a line of code. Same algorithm as the SDKs, just runnable from a tab.

Paste the `Last-Price-Signature` header and the raw request body

Tool confirms the HMAC and surfaces the timestamp window

Failure messages name the exact reason (wrong secret, replay outside the freshness window, body altered after signing)

Reference snippet shows how to do the same verification in code