# DuckLedger

> DuckLedger is a multitenant financial intelligence platform for SaaS companies. It sends signed, at-least-once payment and subscription webhooks to customer products and exposes a permission-scoped HTTP API.

Production API base URL is `https://api.duckledger.com/api/v1`. Outbound webhook signatures use HMAC-SHA256 over `<unix timestamp>.<exact raw request body>` with the endpoint's one-time `whsec_...` secret. Receivers must preserve raw bytes, reject timestamps older than 300 seconds, compare digests in constant time, and deduplicate by event `id`.

## Developer documentation

- [Full LLM integration context](https://duckledger.com/llms-full.txt): Self-contained webhook, API, debugging, event, MCP, and code reference.
- [Developer documentation](https://duckledger.com/developers): Quickstart, searchable 208-operation Asaas parity matrix, and implementation status.
- [Interactive API reference](https://duckledger.com/developers/reference): OpenAPI-powered reference with generated request examples.
- [OpenAPI 3.1 contract](https://duckledger.com/openapi.json): Machine-readable contract. Operations explicitly declare `x-duckledger-status` as `available` or `planned`.
- [Webhook integration guide](https://duckledger.com/developers/guides/webhooks): Signature verification, delivery behavior, and copy-paste receiver examples.
- [Webhook logs](https://duckledger.com/webhooks/logs): Authenticated request and response debugger for inbound and outbound webhook exchanges.

## Integration entry points

- [DuckLedger web application](https://duckledger.com): Connect Asaas and configure API keys and endpoints under Developer.
- [DuckLedger API](https://api.duckledger.com/api/v1): Machine clients use environment-bound `dlk_test_...` or `dlk_live_...` bearer keys for customers, plans, PIX, boleto, cards, charges, refunds, and subscriptions.

## Optional

- [llms.txt proposal](https://llmstxt.org/): Format followed by this file.