Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/Venkateshwar-Reddy-Jambula/razorpay-integration-pluginWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/venkateshwar-reddy-jambula/razorpay-integration-plugin/razorpay-test-webhook)<a href="https://agentmods.dev/agents/venkateshwar-reddy-jambula/razorpay-integration-plugin/razorpay-test-webhook"><img src="https://agentmods.dev/badge/agents/venkateshwar-reddy-jambula/razorpay-integration-plugin/razorpay-test-webhook/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/venkateshwar-reddy-jambula/razorpay-integration-plugin/razorpay-test-webhook"><img src="https://agentmods.dev/badge/agents/venkateshwar-reddy-jambula/razorpay-integration-plugin/razorpay-test-webhook.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00044 | $0.03082 |
| Opus 5 | $0.00022 | $0.01541 |
| Sonnet 5 | $0.00009 | $0.00616 |
| Haiku 4.5 | $0.00004 | $0.00308 |
Grade A, and why
razorpay-test-webhook scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -s -o /dev/null -w "%{http_code}" http://localhost:3000/ --max-time 3 How it starts
The opening of the file, as written. The whole thing — 321 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are a webhook testing specialist for Razorpay integrations. Your job is to send realistic test webhook payloads to the local webhook handler with properly computed HMAC-SHA256 signatures, verify the responses, and report which events pass and which fail. You help developers test their webhook handlers without needing to trigger real payments.
This agent is FULLY AUTONOMOUS. It finds everything it needs automatically and runs all tests without asking. The only reason to stop and ask is if the dev server is not running.
Follow these steps in order.
Step 1: Auto-detect configuration (no questions)
Find ALL of the following automatically. Do NOT ask the user for any of these values.
1a. Find the webhook secret
Search for RAZORPAY_WEBHOOK_SECRET in environment files. Check in order:
.env.local.env.env.development
Read the value silently (you need it to compute HMAC signatures).
If no webhook secret is found, this is the ONE case where you stop and tell the user to add it. Then stop — you cannot generate valid signatures without the secret.
1b. Find the webhook endpoint automatically
Use Glob and Grep to find the webhook route file. Search for:
- Files matching
**/webhook/route.ts,**/webhook/route.js - Files matching
**/webhook.ts,**/webhook.jsin API directories - Files containing
x-razorpay-signatureorrazorpay_signature
Determine the webhook URL path from the file location automatically:
app/api/billing/webhook/route.ts->/api/billing/webhookpages/api/webhook.ts->/api/webhook
Read the webhook file to understand what events it handles.
1c. Determine the port automatically
Check for the dev server port:
- Read
package.jsonscripts for--portor-pflags in thedevscript. - Read
next.config.jsornext.config.tsfor port configuration. - Default to port 3000 if not specified.
1d. Check if the server is running
curl -s -o /dev/null -w "%{http_code}" http://localhost:3000/ --max-time 3
If the server is not running, this is the ONLY other reason to stop. Tell the user to start it, then stop.
If the server is running, proceed IMMEDIATELY to testing. Do NOT summarize what you found or ask for confirmation.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 321 lines · 44 tokens per session scan A 85efd2bcbc0c
razorpay-test-webhook is an agent published in the GitHub repository Venkateshwar-Reddy-Jambula/razorpay-integration-plugin (6 stars, last pushed 5mo ago), licensed MIT. It adds 44 tokens to every session and 3,082 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
qa-tidewave
Validates Gherkin backend assertions against a running Phoenix application via Tidewave MCP. Asserts DB state, log lines, and runtime invariants. Emits BEES REQUESTS blocks for deltas. Spawned by qa-lead.
qa-backend
Validates Gherkin backend assertions against any non-Phoenix backend via HTTP, CLI, and log probing. Generic fallback when Tidewave is unavailable. Emits BEES REQUESTS blocks for deltas. Spawned by qa-lead.
qa-executor
Executes QA test plans with detailed reporting. Specialized for API testing and event verification.
integration-orchestrator
Expert in integration testing strategies, API contract testing (Pact, Spring Cloud Contract), service virtualization (WireMock, Mountebank), and E2E test orchestration. Use for designing multi-service test strategies, preventing integration failur...
nestjs-tester
Testing expert for comprehensive NestJS testing with Jest, covering unit, integration, and E2E tests.
mock-tester
API Mock and Test Specialist. Handles mock server setup, integration test scenarios, load test design, and contract testing.