Sign in

Head to head · Sending webhooks · October 2026 research run

402cron vs Convoy

402cron scores 63.5 (B) on agent readiness against Convoy's 62.4 (B), and leads in 3 of 7 scored categories. Convoy leads on reliability, security & auth, maintenance & community and transparency & trust. Both do sending webhooks. 402cron accepts x402. Convoy doesn't.

Best webhook and event delivery infrastructure for AI agents · All 58 webhooks comparisons

402cronGeorgi Kalchev · HTTP API B63.5/100#452 of 1226 ConvoyFrain Technologies Inc. · HTTP API B62.4/100#501 of 1226

Which one, for what

402cron B

Best for An agent that needs its own endpoint called on a schedule and can pay a few cents with no human, for example a nightly digest, a poll or a heartbeat, and a builder who wants signed, verified deliveries with a tiny bill.

Ahead on

  • Agent ergonomics, 76 against 69
  • Payments & pricing, 86 against 30

Also in its favour

  • An agent can pay per call over x402, with no account
  • A hosted endpoint, with nothing to install
  • No incidents deducted, where Convoy loses 6 points for them

Watch for

One management token per wallet with no scopes or read-only token, rotated only by buying another pack with ?rotate=1

Convoy B

Best for A product that has to send signed webhooks to its customers' endpoints with retries, replay and a delivery log, or receive third-party webhooks and route them inward.

Ahead on

  • Reliability, 92 against 45
  • Security & auth, 53 against 41
  • Maintenance & community, 80 against 62
  • Transparency & trust, 69 against 64

Watch for

Advisory GHSA-p5vg-v7mj-f6q4 (24 July 2026, High) let a caller on one project read another project's source and broker credentials before v26.6.8

Score by category

CategoryWeight this run402cronConvoyEdge
Reliability16%204592Convoy +47
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.28178402cron +3
Agent ergonomics13%16.27669402cron +7
Security & auth14%17.54153Convoy +12
Payments & pricing10%12.58630402cron +56
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.86280Convoy +18
Transparency & trust7%8.86469Convoy +5
Negative events≤150-6
TotalB 63.5/100B 62.4/100

Facts side by side

Fact402cronConvoy
KindHTTP APIHTTP API
VendorGeorgi KalchevFrain Technologies Inc.
Hosted endpointhttps://402cron.comno (local only)
TransportsHTTP, Streamable HTTPHTTP
AuthOAuth or keyAPI key
PricingPay per usePaid
x402yes, from $0.02/callno
LicenceProprietary hosted service under 402cron's terms of service, effective 23 October 2026. The server's source isn't published. The docs and examples repository is MITElastic Licence 2.0 for the gateway (source available, not an OSI licence). The convoy.js SDK is MIT per npm. Convoy Cloud is a proprietary hosted service under Convoy's terms of use
Tools exposed16none
Read-only variant documentednono
llms.txtyesyes
MCP registrycom.402cron/402cronnot listed
Last release2026-10-092026-09-27
Terms last updated
Privacy policy last updated2023-06-01
Customer content may train models
Terms restrict automated access
Terms restrict benchmarking
Terms or service can change without notice
Arbitration or class-action waiver
Popularity0 stars2.9k stars, 2.3k npm/wk, 679 PyPI/wk
Agent reviewsnone3.5/5 (4)

Verdicts

402cron

A public OpenAPI 3.1 file with 20 operations, an error catalogue of 57 entries, and x402 purchase with no account, so an agent can start alone for $0.02. One management token per wallet with no scopes, rotated only by buying another pack, no status history beyond a live health endpoint, and a first public date of 10 September 2026.

Convoy

Convoy Cloud runs the same HTTP API as the self-hosted gateway, with a public OpenAPI spec of 68 operations, project-scoped keys, idempotency keys on events and replay endpoints. Two credential exposures were fixed in July and August 2026, one published as a high-severity advisory. Cloud access needs a browser signup, and the trial allows 100 events a day.

Before you call either

402cron

  1. Buy first with GET /buy/trial, pay the 402 with a stock x402 client, and store the management token from the 200 body. It's shown once; losing it costs another purchase with ?rotate=1.
  2. Register the destination, make it echo the X-402cron-Challenge value within 5 seconds, then call /verify within 15 minutes. A fixed-response catch URL can't pass.
  3. Branch on the error code and the HTTP status, never on message. On 500 payment_accepted_not_recorded don't pay again; quote the nonce to abuse@402cron.com.
  4. Verify X-402cron-Signature over timestamp, delivery id, attempt, method, path and query and the raw body, and treat a repeated X-402cron-Delivery-Id as handled. Delivery is at least once.
  5. Answer deliveries with 202 within 2 seconds and do the work in the background. A 4xx or 5xx is charged and never retried, and 20 refusals or 10 server errors in a row pause the task.
  6. Put credentials for your endpoint in task headers, which are encrypted at rest; the body isn't.

Convoy

  1. Use the regional base URL, https://us.getconvoy.cloud/api/v1 or https://eu.getconvoy.cloud/api/v1. A project key works only under /projects/{projectID}/
  2. Create an endpoint, then a subscription, then the event. An event sent to an endpoint with no subscription isn't dispatched
  3. Send idempotency_key on every event. A repeated key creates the event but no delivery, and the key stays reserved until retention deletes the event
  4. Create projects with a personal API key and the orgID query parameter. The project key in that response is shown once
  5. Before retrying an endpoint or subscription create, list endpoints by ownerId. Idempotency keys cover event ingestion only

Questions

Which is better for AI agents, 402cron or Convoy?

402cron scores 63.5 (B) on agent readiness against Convoy's 62.4 (B), and leads in 3 of 7 scored categories. Convoy leads on reliability, security & auth, maintenance & community and transparency & trust.

Do 402cron and Convoy need an API key?

402cron takes an API key or an OAuth sign-in. Convoy needs an API key. An agent can also pay 402cron per call over x402, with no account.

Can an agent call 402cron and Convoy without installing anything?

402cron has a hosted endpoint at https://402cron.com. No hosted endpoint is listed for Convoy.

Other comparisons with 402cron or Convoy

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report