Does your app still let canceled customers in?

There is no account and no server. Nothing is uploaded and nothing is granted to anyone. The tool is a script that runs in your project folder, reads your files locally, and writes a report to your disk.

It reads what it needs to answer one question: where your Stripe webhook is, which events it handles, and where your app decides who has paid. It never prints a key beyond its last four characters, and it only tests with Stripe test keys. Pointed at a live key, it refuses.

Every line is plain JavaScript with zero dependencies, so you can read it before you run it: github.com/jacekimmy/akeso-check. If you would rather not run a stranger's script on your own machine, run it in a throwaway GitHub Codespace instead: the Lovable tab above has the steps, and they work for any repo.

A graded report opens in your browser. It is a file on your disk, not a webpage. Below: real output from a real production app, before and after its webhook was repaired.