Canonical recipe
No MCP tools for subscriptions today. Use the HTTP procedure in Incoming Payment Monitor. Create a webhook subscription, verify HMAC signatures, handle events idempotently.
Risk
Public webhook endpoints must validate the HMAC signature. Idempotency is the agent’s responsibility.