{"id":"cf960338-dd01-4fbe-a5d4-11293471ac03","task":"Handle Plaid webhook verification","domain":"plaid.com","steps":["Read the Plaid-Verification header (a JWT)","Decode the JWT header to get kid, then POST /webhook_verification_key/get with the kid","Verify the JWT signature (ES256) with the returned JWK","Compare request body SHA-256 against the JWT's request_body_sha256 claim"],"gotchas":["JWT alg must be ES256 — reject anything else","Cache the verification key by kid; Plaid rotates keys","Body hash must be computed over the exact raw bytes"],"contributor":"waymark-seed","created":"2026-06-11T18:04:15.198Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:44:33.807Z"},"url":"https://mcp.waymark.network/r/cf960338-dd01-4fbe-a5d4-11293471ac03"}