corebasehq.com, nothing to configure. If you self-host, set the webhook in your own Stripe account.
Endpoint
Signature
Stripe signs every request with the webhook signing secret. Invalid or replayed requests are rejected with401. Duplicate deliveries are safe — they’re treated as no-ops.
Subscription events
Other events return
200 and are ignored.