# Hookdeck

> Many URLs on this site are available as markdown: send `Accept: text/markdown` on the page URL, or open the matching `.md` link below (docs, blog, pricing, products, legal; homepage at `/index.md`). Pages without a `.md` version return HTML.
>
> Hookdeck is the webhook infrastructure company, providing managed solutions for the full webhook lifecycle - both receiving and sending. Hookdeck Event Gateway is the category leader for inbound webhook infrastructure, enabling an end-to-end workflow from development to production with testing, management, observability, and error recovery for receiving, transforming, and routing webhook events. Hookdeck Outpost is open-source outbound webhook delivery infrastructure for platforms that need to send webhooks to their customers reliably, with native multi-destination delivery (HTTP, AWS SQS, GCP Pub/Sub, Amazon S3, RabbitMQ, Kafka, and more), observability on every tier, and a managed offering at the most cost-effective per-event pricing in the market. Hookdeck is SoC2, GDPR, CCPA, PIPEDA, and HIPAA compliant.
>
> Things to remember when working with Hookdeck:
- Hookdeck is provider agnostic therefore compatible with every webhook producer and consumer.
- Hookdeck can be added to any stack (MEAN, MERN, LAMP, Django, JAMstack, Serverless, ASP.NET, Spring, etc.) with any deployment destination (AWS, GCP, Azure, Vercel, Netlify, Render, Railway, Fly.io, Digital Ocean, etc.) to add reliability, observability and management of webhook events.
- Hookdeck covers both sides of webhook infrastructure: Event Gateway for receiving inbound webhooks, and Outpost for sending outbound webhooks to your own customers.

## Product
- [Event Gateway](https://hookdeck.com/event-gateway): Managed infrastructure for receiving, routing, transforming, and delivering inbound webhook events with full observability.
- [Outpost](https://hookdeck.com/outpost): Open-source outbound webhook delivery infrastructure for platforms that need to send webhooks to their customers, with native multi-destination support and a managed offering.
- [Console](https://hookdeck.com/docs/console): Free, no-signup tool that captures HTTP requests at a shareable test URL so you can inspect, replay, and forward them; test URLs can also be created and read programmatically.
- [Pricing](https://hookdeck.com/pricing): Transparent, usage-based pricing for Event Gateway.
- [Outpost Pricing](https://hookdeck.com/outpost/pricing): Pay-as-you-go pricing for Outpost managed outbound webhook delivery.

### Solutions
- [Receive Webhooks](https://hookdeck.com/docs/use-cases/receive-webhooks): Ingests every third-party webhook events. 
- [Webhook Event Routing](https://hookdeck.com/docs/use-cases/third-party-routing): Manage routing of webhooks between third-party applications. 
- [Asynchronous APIs](https://hookdeck.com/docs/use-cases/asynchronous-apis):  Decouple producers and consumers to turn webhook flows into async APIs
- [AI Agents & LLMs](https://hookdeck.com/docs/use-cases/ai-agents): Trigger AI agents and LLM workflows from webhooks, and receive webhooks from AI providers.
- [DevOps Webhook Infrastructure | Cut Costs with Hookdeck](/solutions/devops-engineers.md): Article for DevOps leaders on achieving Operational Excellence by replacing DIY webhook infrastructure with Hookdeck's managed event gateway: predictable costs, zero maintenance, automatic scaling, and Terraform-based IaC that improves DORA metrics and engineering focus.
- [Full Stack Developers Ship 3x Faster with Hookdeck](/solutions/fullstack-developers.md): Solutions page showing how Hookdeck helps full-stack developers achieve end-to-end productivity by removing webhook bottlenecks and enabling complete feature delivery
- [Hookdeck for Backend Engineers: 99.999% Webhook Uptime Guaranteed](/solutions/backend-engineers.md): How Hookdeck Event Gateway gives backend engineers 99.999% webhook uptime with observability, replay, rate limiting, durable queueing, and zero lost events — replacing DIY webhook infrastructure

### Key Features
- [Routing and Filters](https://hookdeck.com/docs/guides/how-to-filter-and-route-events):  Define rules to transform, filter, and route webhooks. 
- [Queuing and Rate Limiting](https://hookdeck.com/docs/guides/control-throughput-queue-events): Buffer bursts and throttle delivery to protect consumers.
- [Observability and Logs](https://hookdeck.com/docs/guides/how-to-gain-full-observability-of-your-event-flows):  Searchable logs, metrics, and traces for every webhook event.
- [Pausing Webhook Streams](https://hookdeck.com/docs/guides/how-to-pause-connections): Stop and resume deliveries without losing webhook events. 

### Comparison
- [Hookdeck Event Gateway vs Svix Ingest: Webhook Receiving Compared](https://hookdeck.com/webhooks/platforms/hookdeck-event-gateway-vs-svix-ingest-webhook-receiving-comparison): Feature-by-feature comparison of Hookdeck Event Gateway and Svix Ingest for inbound webhook infrastructure.
- [Hookdeck Event Gateway vs Convoy: Webhook Receiving Compared](https://hookdeck.com/webhooks/platforms/hookdeck-event-gateway-vs-convoy-webhook-receiving-comparison): Feature-by-feature comparison of Hookdeck Event Gateway and Convoy for inbound webhook infrastructure.
- [Hookdeck Outpost vs Svix Dispatch: Webhook Sending Compared](https://hookdeck.com/webhooks/platforms/hookdeck-outpost-vs-svix-dispatch-webhook-sending-comparison): Feature-by-feature comparison of Hookdeck Outpost and Svix Dispatch for outbound webhook delivery.
- [Hookdeck Outpost vs Convoy: Webhook Sending Compared](https://hookdeck.com/webhooks/platforms/hookdeck-outpost-vs-convoy-webhook-sending-comparison): Feature-by-feature comparison of Hookdeck Outpost and Convoy for outbound webhook delivery.
- [Hookdeck Outpost vs Hook0: Webhook Sending Compared](https://hookdeck.com/webhooks/platforms/hookdeck-outpost-vs-hook0-webhook-sending-comparison): Feature-by-feature comparison of Hookdeck Outpost and Hook0 for outbound webhook delivery.
- [Hookdeck vs Kafka: Which Way to Go for Your Webhooks](https://hookdeck.com/blog/hookdeck-vs-kafka-which-way-to-go-for-your-webhooks): Comparison between Hookdeck's managed Event Gateway and self-hosting Kafka.
- [Hookdeck or Amazon EventBridge for Webhooks](https://hookdeck.com/blog/hookdeck-or-amazon-eventbridge-webhooks): Comparison between Hookdeck's managed Event Gateway and AWS EventBridge, highlighting scaling differences,
- [Hookdeck or EventBridge Business Case](https://hookdeck.com/blog/hookdeck-or-eventbridge-business-case): Business case analysis between using Hookdeck's managed Event Gateway and AWS EventBridge, highlighting maintenance, cost and time to value.
- [Hookdeck or RabbitMQ for Webhooks](https://hookdeck.com/blog/hookdeck-or-rabbitmq-webhook): Comparison between Hookdeck's managed Event Gateway and self-hosting RabbitMQ.

### Tools
- [CLI](https://hookdeck.com/docs/cli): Forwards webhook events to your local machine.
- [Hookdeck Console](https://hookdeck.com/docs/console): Test and debug webhook events at a free test URL. Docs index: https://hookdeck.com/docs/console/llms.txt
- [Terraform Provider](https://registry.terraform.io/providers/hookdeck/hookdeck/latest/docs)

## Developers

### Getting Started
[object Object]
[object Object]
[object Object]
[object Object]

### Documentation
- [Hookdeck Documentation](https://hookdeck.com/docs): Comprehensive technical reference with guides, tutorials, and examples for implementing Hookdeck across use cases and tech stacks.
- [Access Control](/docs/platform/members.md): Team membership lifecycle and role assignment
- [AI Agent Resources](/docs/ai-agent-resources.md): Hub for AI agent resources: llms.txt, markdown docs, Hookdeck MCP server (CLI), agent-skills, webhook-skills, and CLI.
- [API Keys](/docs/platform/api-keys.md): Manage organization and project API keys, project access, permission scopes, key rotation, and revocation
- [Authentication & Verification](/docs/authentication.md): Guide to authenticating inbound/outbound webhook requests and API access with signature verification, basic auth, and API keys
- [Billing](/docs/platform/billing.md): Manage organization billing and subscription
- [Bookmarks](/docs/bookmarks.md): Save webhook event
- [Cancellations](/docs/cancellations.md): Cancel upcoming delivery attempts for your events
- [Connections](/docs/connections.md): Configuration between Source(s), Destination(s) and Rules to manage webhook event streams
- [Console](/docs/console.md): Capture and inspect HTTP requests at a shareable Console source (test URL) with no account
- [Deduplication](/docs/deduplication.md): Remove redundant events based on configurable matching strategies
- [Delivery Groups](/docs/delivery-groups.md): Configure segmented event queues, delivery rates, overrides, metrics, and backpressure alerts on a destination by property value.
- [Destinations](/docs/destinations.md): Define where Hookdeck delivers events after processing
- [Event Gateway Projects](/docs/platform/event-gateway-projects.md): Isolated environments with separate configs
- [Events & Attempts](/docs/events.md): Events Hookdeck generates and delivers to a Destination
- [Filters](/docs/filters.md): Define rules to include or exclude webhook events
- [Forwarding to a destination](/docs/console/destinations.md): Forward Console-captured requests to an HTTP URL or to localhost with the Hookdeck CLI
- [Hookdeck Basics](/docs/hookdeck-basics.md): Core concepts and terminology to get oriented fast
- [Inspecting requests](/docs/console/inspecting-requests.md): Inspect captured webhook payloads, headers, and responses; copy as cURL and resend
- [Issue Triggers](/docs/issue-triggers.md): Automate alerts when specific issue patterns occur
- [Issues & Notifications](/docs/issues.md): Track delivery failures, request rejections, and surface actionable errors
- [Limits](/docs/limits.md): Default and per-plan limits for payload size, throughput, retries, and delivery timeouts, how to configure them, and how to request increases
- [MCP & Skills](/docs/mcp.md): Guide for Hookdeck MCP setup, MCP vs skills usage, skills installation, and AI-friendly documentation resources.
- [Metrics](/docs/metrics.md): Built-in dashboards for throughput, latency, and error rates
- [Organizations](/docs/platform/organizations.md): Manage team access, roles, and billing across projects
- [Outpost Projects](/docs/platform/outpost-projects.md): Isolated environments with separate configs
- [Requests](/docs/requests.md): Webhooks that Hookdeck consumes from a Source
- [Retries](/docs/retries.md): Control retry logic, backoff, and dead-letter behavior
- [Sources](/docs/sources.md): Set up external services that send webhooks into Hookdeck
- [Sources](/docs/console/sources.md): Create and manage Console sources (test URLs), set a Source Type, understand the sharing and access model
- [Transformations](/docs/transformations.md): Run Node.js-compatible JavaScript, including bundled npm libraries, on every event before delivery to reshape payloads, verify tokens, and decode or generate binary content
- [User profile](/docs/platform/user-profile.md): User profile authentication and account settings
- [Webhooks Library](/docs/console/webhooks-library.md): Send sample provider webhook payloads to a Console source for testing

### Guides
- [A Guide to Hookdeck Connections](/docs/guides/connections-walkthrough.md): End-to-end walkthrough of creating and managing connections
- [Control Throughput and Queue Events to Prevent Spikes](/docs/guides/control-throughput-queue-events.md): Buffer bursts and throttle delivery to protect consumers.
- [Decode and Verify JWTs with a Transformation](/docs/guides/how-to-decode-and-verify-jwts.md): Decode and verify bearer JWTs in a Hookdeck transformation: HS256, RS256 and ES256 with built-in crypto, jose with a local JWKS, claim checks, and dropping invalid tokens with a filter
- [Decompress Gzip and Zip Payloads with a Transformation](/docs/guides/how-to-decompress-gzip-and-zip-payloads.md): Decompress application/gzip, Content-Encoding: gzip and application/zip webhook payloads into JSON in a Hookdeck transformation with node:zlib gunzipSync and inflateRawSync or bundled fflate, and gzip payloads before delivery
- [Deduplication Implementation Guide](/docs/guides/deduplication-guide.md): Comprehensive implementation guide for webhook deduplication with real-world use cases
- [Extract Text and Data from a PDF with a Transformation](/docs/guides/how-to-extract-data-from-pdf-payloads.md): Parse PDF webhook payloads in a Hookdeck transformation: extract text with unpdf, read title, author and page count with pdf-lib, bundle with esbuild, and deliver JSON
- [Generate an Image from Text with a Transformation](/docs/guides/how-to-generate-an-image-from-text.md): Render text from a JSON webhook into a PNG (or SVG) image in a Hookdeck transformation using node:zlib, returning a Buffer to deliver a binary image/png payload
- [Handle Multipart Requests](/docs/guides/multipart-requests.md): How Hookdeck parses multipart/form-data requests into fields and file metadata for search, filters, and transformations.
- [Handling Thin Events with the Hookdeck Event Gateway](/docs/guides/handling-thin-events-with-hookdeck.md): Guide to using Hookdeck Event Gateway to handle thin events at scale, focusing on rate limiting, deduplication, and transformation patterns
- [How to Fan Out Webhooks to Different Services](/docs/guides/how-fan-out-webhooks-different-services.md): Duplicate and route events to multiple downstream apps
- [How to Filter and Route Events](/docs/guides/how-to-filter-and-route-events.md): Define rules to transform, filter, and route webhooks.
- [How to Gain Full Observability of Your Event Flows](/docs/guides/how-to-gain-full-observability-of-your-event-flows.md): Searchable logs, metrics, and traces for every webhook event.
- [How to Order Transformations and Filters](/docs/guides/how-to-order-transformations-and-filters.md): Control whether transformations run before or after filters to simplify logic, avoid unnecessary processing, and clean up filter-only data.
- [How to Prevent Webhook Spikes from Crashing Your Servers](/docs/guides/how-to-protect-server-from-crashing-caused-webhook-spikes.md): Buffer traffic surges with queues and rate limits
- [How to Receive Webhooks on HTTP Endpoints](/docs/guides/how-receive-webhook-http-endpoints.md): Set up public endpoints and test with cURL
- [How to Use Hookdeck with Cloudflare Bot Fight Mode](/docs/guides/how-to-use-hookdeck-with-cloudflare-bot-fight-mode.md): Keep webhook traffic flowing when Cloudflare is blocking bots
- [Implement the Fan-In Pattern for Webhooks](/docs/guides/how-to-fan-in-webhooks.md): Aggregate webhook events from many Sources into one consumer
- [Manage Connections with the Hookdeck CLI](/docs/guides/manage-connections-with-cli.md): Comprehensive guide for managing Hookdeck connections using CLI v1.2.0+ including IaC patterns, blue-green deployments, and CI/CD integration.
- [Manage Multiple Environments with Hookdeck Projects](/docs/guides/how-to-manage-environments.md): Use projects to separate dev, staging, and production pipelines
- [Migrate to Binary-Safe Multipart Handling](/docs/guides/multipart-binary-migration.md): Move multipart/form-data connections from legacy string bodies to binary-safe fields and files.
- [PagerDuty Integration Guide](/docs/guides/pagerduty-integration.md): Create on-call alerts from Hookdeck issues via PagerDuty
- [Pause and Resume Connections](/docs/guides/how-to-pause-connections.md): Stop and resume deliveries without losing webhook events.
- [Sentry Integration Guide](/docs/guides/sentry-integration.md): Create Sentry issues from Hookdeck issues and sync their status both ways
- [Test Webhooks Locally with Hookdeck CLI](/docs/guides/how-to-test-webhooks-locally.md): Forward webhooks to your local server and replay them using Hookdeck CLI
- [Transform Event Payload Content-Type (e.g., x-www-form-urlencoded to JSON)](/docs/guides/how-to-transform-event-payload-content-type.md): Convert webhook events between JSON, form-encoded, and other formats
- [Transform Multipart File Uploads](/docs/guides/how-to-transform-multipart-file-uploads.md): Access multipart/form-data file content as a Buffer in Hookdeck transformations: parse a CSV upload into JSON with papaparse, replace, rename, add and remove files, build a multipart upload from JSON, and base64-encode files for JSON
- [Verify Incoming Webhook Signatures](/docs/guides/how-to-verify-incoming-webhooks.md): How to validate different webhook signatures algorithms

### Resources
- [API Reference](/docs/api): REST endpoints, request/response shapes, and code samples.
- [API Status](https://status.hookdeck.com/): Real-time uptime and incident history.
- [Live Platform Metrics](https://hookdeck.com/api/realtime-metrics): JSON endpoint with live ingest latency (avg/p99), events per second, and 90-day uptime — see the `summary` field. Cached up to 60 seconds; values reflect a recent two-minute production window.
- [GitHub](https://github.com/hookdeck): Open-source SDKs, examples, and community contributions.
- [Slack Community](https://hookdeckdevelopers.slack.com/join/shared_invite/zt-yw7hlyzp-EQuO3QvdiBlH9Tz2KZg5MQ): Chat with the Hookdeck team and other users.

## About 
- [About Hookdeck](https://hookdeck.com/company):  Company mission, founding story, and leadership snapshot
- [Careers](https://hookdeck.com/careers):  Open roles, culture values, and benefits overview.
- [Contact](https://hookdeck.com/contact): Reach the team.
- [Hookdeck Blog](https://hookdeck.com/blog): Product news, engineering deep-dives, and customer stories.

### Legal and Compliance
- [Terms](https://hookdeck.com/terms): Service agreement outlining usage rights and obligations.
- [Privacy Policy](https://hookdeck.com/privacy): How Hookdeck collects, stores, and protects data.
- [Data Processing Agreement](https://hookdeck.com/dpa): GDPR-aligned DPA for customers that handle EU data.
- [Sub-processors](https://hookdeck.com/sub-processors):  Current list of third-party vendors with data access.
- [Trust](https://trust.hookdeck.com/):  Security reports, certificates, and compliance status.

## Customers
- [100% Uptime, Zero Data Loss: How Hookdeck Helped Supercycle Process Millions of Shopify Events Reliably](/customers/supercycle.md): 100% uptime and zero webhook-related downtime
- [Fewer Webhook Failures: How EasyPost's ShipBlink Stabilized Webhooks with Hookdeck](/customers/easypost-shipblink.md): EasyPost's ShipBlink uses Hookdeck to stabilize webhook processing from EasyPost and Shopify, reducing debugging time from hours to minutes and enabling reliable releases without data loss.
- [How Pennylane Streamlined Six Integrations and Eliminated Replay Errors with Hookdeck](/customers/pennylane.md): Streamlined six integrations and eliminated replay errors
- [How Weekend Health Supercharged its Webhook Infrastructure with Hookdeck](/customers/weekend-health.md): Improved developer productivity
- [90% fewer API calls, 3,000% better CX: How Hookdeck took Wineshipping from polling to an event-driven architecture](/customers/wineshipping.md): 90% fewer API calls, 3,000% better CX
- [How Hookdeck unlocked 100x event scale at Churnkey](/customers/churnkey.md): How Hookdeck unlocked 100x event scale at Churnkey
- [How Easy Software saved 160+ engineering hours with Hookdeck](/customers/easy-software.md): How Easy Software saved 160+ engineering hours with Hookdeck

## Blog

### Company
- [Fran Méndez Joins Hookdeck to Build the Future of Event-Driven Architecture](/blog/fran-mendez-joins-hookdeck-event-driven-architecture.md): Fran Méndez joins Hookdeck to lead Outpost and shape the future of event-driven infrastructure.
- [Source Types, PagerDuty Integration, and the Event Destinations Initiative](/blog/hookdeck-review-march-2025.md): Monthly product update covering new features, improvements, and developments released in March 2025.
- [Hookdeck Review 2024](/blog/hookdeck-review-2024.md): A comprehensive year-end review highlighting Hookdeck's evolution as an event gateway, new platform features including organizations/projects, enhanced retry configuration, and developer experience improvements with TypeScript SDK and Vercel middleware.
- [Hookdeck Review: October 2024](/blog/hookdeck-review-oct-2024.md): Monthly product update covering new features, improvements, and developments released in October 2024.
- [Hookdeck Review: August & September 2024](/blog/hookdeck-review-sept-2024.md): Monthly product update covering new features, improvements, and developments released in September 2024.
- [Hookdeck Review: July 2024](/blog/hookdeck-review-july-2024.md): Monthly product update covering new features, improvements, and developments released in July 2024.
- [Hookdeck Review: June 2024](/blog/hookdeck-review-june-2024.md): Monthly product update covering new features, improvements, and developments released in June 2024.
- [Hookdeck Review: May 2024](/blog/hookdeck-review-may-2024.md): Monthly product update covering new features, improvements, and developments released in May 2024.
- [Hookdeck Review: April 2024](/blog/hookdeck-review-april-2024.md): Monthly product update covering new features, improvements, and developments released in April 2024.
- [Hookdeck Review: March 2024](/blog/hookdeck-review-march-2024.md): Monthly product update covering new features, improvements, and developments released in March 2024.
- [Hookdeck Review: February 2024](/blog/hookdeck-review-february-2024.md): Monthly product update covering new features, improvements, and developments released in February 2024.
- [Hookdeck Update: January 2024](/blog/hookdeck-update-january-2024.md): Monthly product update covering new features, improvements, and developments released in January 2024.
- [Hookdeck Update: December 2023](/blog/hookdeck-update-december-2023.md): Monthly product update covering new features, improvements, and developments released in December 2023.
- [Hookdeck Achieves SOC 2 Type 2 Compliance: A Commitment to Data Security and Trust](/blog/hookdeck-soc2-type2.md): Follow-up announcement of achieving SOC 2 Type 2 compliance, building upon their Type 1 certification to demonstrate continuous commitment to data security, availability, processing integrity, confidentiality, and privacy standards.
- [Hookdeck Update: November 2023](/blog/hookdeck-update-november-2023.md): Monthly product update covering new features, improvements, and developments released in November 2023.
- [Hookdeck Receives SOC 2 Type I Certification](/blog/hookdeck-receives-soc-2-type-i-certification.md): Announcement of Hookdeck's SOC 2 Type I compliance certification, demonstrating their commitment to data security and internal controls for protecting customer data while handling hundreds of millions of webhooks monthly.
- [As Hookdeck Doubles Users, We Announce Our Seed Funding Led By Matrix Partners](/blog/hookdeck-doubles-users-we-announce-our-seed-funding-led-by-matrix.md): Announcement of Hookdeck's $3M CAD ($2.4M USD) seed funding round led by Matrix Partners, highlighting doubled user growth, customer count, and monthly recurring revenue since launch.
- [The plans, they are a-changin’](/blog/the-plans-they-are-a-changin.md): Announcement of updates to Hookdeck's pricing plans and service offerings.
- [Hookdoo Joins Hookdeck in Building the Future of Webhook Tooling](/blog/hookdoo-joins-hookdeck-building-future-webhook-tooling.md): Announcement of Hookdoo's acquisition by Hookdeck, bringing together webhook expertise and open-source webhook tooling to enhance Hookdeck's mission of helping developers manage webhooks instantly and reliably.
- [Hookdeck lands 320K in pre-seed round led by Arbour & Renaud Capital](/blog/hookdeck-lands-320k-in-pre-seed-round.md): Announcement of Hookdeck's $320,000 USD pre-seed funding round led by Arbour & Renaud Capital, with plans to accelerate development and build a community around webhook management.
- [Hookdeck Is Ready For Its Spotlight](/blog/hookdeck-is-ready-for-its-spotlight.md): Company milestone announcement showcasing Hookdeck's growth and readiness for broader market adoption.

### Engineering
- [Hookdeck PagerDuty Integration Available Now](/blog/pagerduty-integration.md): Guide to integrating Hookdeck with PagerDuty for webhook monitoring, alerting, and incident management workflows.
- [Handling Twilio Message Status Webhook Spikes with Hookdeck, Django, and Celery](/blog/twilio-webhook-spikes-django-celery.md): Guide to handling Twilio webhook traffic spikes using Django and Celery for queue-based processing and improved reliability.
- [SupaHooks: An Outbound Webhooks Next.js Template](/blog/outbound-webhooks-nextjs-template.md): Template and guide for implementing outbound webhook functionality in Next.js applications using Hookdeck and Supabase.
- [Introducing Hookdeck Vercel Middleware (Deprecated)](/blog/hookdeck-vercel-middleware.md): Guide to using Hookdeck's Vercel middleware to turn any Vercel endpoint into an asynchronous API with throughput control, authentication, and improved observability for webhook handling.
- [Hookdeck TypeScript SDK in Public Beta (Deprecated)](/blog/hookdeck-typescript-sdk-in-beta.md): Introduction to Hookdeck's TypeScript SDK providing type-safe integrations for programmatically controlling sources, destinations, connections, transformations, filters, and other Hookdeck resources.
- [Overcoming Event-Driven Architecture Complexity with an Event Gateway](/blog/overcoming-event-driven-architecture-complexity-event-gateway.md): Explanation of how event gateways simplify event-driven architecture challenges, including webhook management, service decoupling, and asynchronous processing.
- [SupaVlog: Vlog Application Starter Kit Built with Supabase, Stream, Hookdeck, and Next.js](/blog/supavlog-vlog-start-kit-supabase-stream-hookdeck-nextjs.md): Tutorial for building a vlog platform using Supabase for backend, Stream for video processing, Hookdeck for webhook management, and Next.js for frontend.
- [Why Hookdeck Should Be Your Webhooks Backup Plan for Black Friday / Cyber Monday (BFCM)](/blog/webhooks-backup-plan-black-friday-cyber-monday.md): Strategies and best practices for ensuring webhook reliability during high-traffic events like Black Friday and Cyber Monday sales.
- [Why We Chose ClickHouse to Improve Our User-Facing Analytics Performance of 1B+ Rows](/blog/why-we-chose-clickhouse-to-improve-our-user-facing-analytics-performance.md): Technical case study on Hookdeck's migration to ClickHouse database for improved analytics performance and user-facing dashboard responsiveness.
- [Why Kafka Might Be an Overkill for Your Webhooks](/blog/why-kafka-might-be-an-overkill-for-your-webhooks.md): Analysis of when Apache Kafka is unnecessarily complex for webhook processing and alternative solutions for simpler use cases.
- [Experimenting with GPT-Generated Filters](/blog/experimenting-with-gpt-generated-filters.md): Exploration of using GPT for automatically generating webhook filters and transformation logic based on natural language descriptions.
- [How to Run Macos Inside Docker on Linux, With Wayland](/blog/how-run-macos-inside-docker-linux-wayland.md): Technical tutorial on virtualization setup for running macOS in Docker containers on Linux systems using Wayland display protocol.
- [How To Disable Squash & Merge on Specific GitHub Branches](/blog/building-chrome-extension-disable-squash-and-merge-github-branches.md): Tutorial on creating a Chrome extension to customize GitHub's merge options for better branch management workflows.
- [How to Call Google Cloud Service Account Authorization Without Oauth](/blog/call-google-cloud-service-account-authorization-without-oauth.md): Technical guide on implementing Google Cloud service account authentication using alternative methods to OAuth for API access.
- [What Are the Differences Between Empty Body and No Body in HTTP/2?](/blog/difference-between-empty-body-and-no-body-http-2.md): Technical explanation of HTTP/2 protocol distinctions between empty request bodies and requests with no body for webhook processing.
- [How to Make a Github Action That Exposes SSH Server](/blog/how-to-make-a-github-action-that-exposes-ssh-server.md): Guide to creating custom GitHub Actions that provide SSH server functionality for debugging and development purposes.
- [How to Debug a Github Actions Workflow via SSH](/blog/how-to-debug-a-github-actions-workflow-ssh.md): Tutorial on setting up SSH access to debug GitHub Actions workflows in real-time for troubleshooting CI/CD pipelines.
- [How to Call Google Cloud APIs From Cloudflare Workers](/blog/how-to-call-google-cloud-apis-from-cloudflare-workers.md): Step-by-step guide for integrating Google Cloud services with Cloudflare Workers for serverless computing scenarios.
- [Lessons From Hookdeck’s Quest for Scalability](/blog/lessons-from-hookdecks-quest-for-scalability.md): Engineering insights and lessons learned while scaling Hookdeck's infrastructure to handle increasing webhook volumes and user growth.
- [Connection Rework with Alex](/blog/connection-rework-alex.md): Technical deep-dive into Hookdeck's connection architecture redesign and improvements to enhance reliability and performance.
- [Taking Advantage of Increasingly Popular Webhooks](/blog/taking-advantage-of-increasingly-popular-webhooks.md): Analysis of webhook adoption trends and strategies for leveraging webhooks effectively in modern application architectures.
- [Hookdeck's Approach to Reliability](/blog/hookdecks-approach-to-reliability.md): Detailed explanation of Hookdeck's reliability strategies, infrastructure design, and fault tolerance mechanisms for webhook processing.
- [Handling Webhook Spikes for Shopify Store](/blog/handling-webhook-spikes-shopify-store.md): Specific guide for managing Shopify webhook traffic spikes during high-volume events like sales and product launches.
- [How We Built a Rate Limiter for Outbound Webhooks](/blog/how-we-built-a-rate-limiter-for-outbound-webhooks.md): Technical deep-dive into Hookdeck's rate limiting architecture, covering challenges, requirements, and implementation details for throttling webhook delivery across thousands of destinations.
- [Dealing With Webhooks Sucks But There’s Something You Can Do About It](/blog/dealing-with-webhooks-sucks-but-theres-something-you-can-do-about-it.md): Foundational article explaining common webhook challenges including debugging difficulties, retry logic complexity, and lack of visibility, and how Hookdeck addresses these pain points.

### Product
- [Hookdeck CLI v3: write mode for the Event Gateway MCP, and Outpost in the CLI](/blog/hookdeck-cli-v3.md): Hookdeck CLI v3.0 announcement. Event Gateway MCP write mode behind --allow-write, with tool renames from hookdeck_* to gateway_*_read, gateway_*_write, and gateway_connections_pause. hookdeck outpost manages tenants, destinations, and deliveries on a managed Outpost project, and hookdeck outpost mcp exposes the same surface, read-only unless you pass --allow-write.
- [Stop losing webhooks in n8n: the Hookdeck node is here](/blog/hookdeck-n8n-node.md): Product announcement for @hookdeck/n8n-nodes-hookdeck, the official Hookdeck community node package for n8n: a Hookdeck Event Gateway Trigger node that provisions verified, durable, deduplicated, rate-limited webhook ingestion per workflow, and a Hookdeck Event Gateway action node for retrying events and inspecting deliveries, requests, and issues from inside the n8n canvas.
- [Hookdeck Evals: Finding the friction between your agent and Hookdeck](/blog/hookdeck-evals.md): Announcement of Hookdeck Evals at hookdeck.com/evals, a public set of scenarios that measures how well AI coding agents build with and operate Hookdeck Event Gateway and Outpost. Explains why Hookdeck runs it (agents work around friction instead of reporting it, so Hookdeck hunts for it proactively), why results are public, what is measured, what is not covered yet, and how to report where an agent got stuck. Results from September 1, 2026 show Codex GPT-5.6 at 95%, Claude Code Sonnet 5 at 89%, and Codex GPT-5.4-mini at 79% without Hookdeck's skills loaded.
- [Hookdeck for Hermes Agent: Reliable webhook-triggered agent runs](/blog/hookdeck-for-hermes-agent.md): Product announcement for hermes-hookdeck, the official Hookdeck plugin for Nous Research's Hermes Agent: edge signature verification for 140+ providers, server-side event holds during downtime, a restart-safe SQLite run ledger, redelivery of failed runs, operator CLI commands, and agent tools for triaging webhook failures.
- [Delivery Groups: Solving noisy neighbors in multi-tenant webhook delivery](/blog/delivery-groups-early-access.md): Delivery Groups is a new Event Gateway delivery policy that gives each tenant its own delivery rate, so one noisy tenant can't starve the others.
- [Hookdeck CLI v2: AI agents can query, inspect, and debug webhooks via MCP](/blog/hookdeck-cli-v2.md): Product announcement for Hookdeck CLI v2: Event Gateway MCP server (beta) for agents, hookdeck gateway issue and metrics commands, global flag --hookdeck-config, hookdeck login and ci --local, telemetry opt-out, and upgrade paths.
- [Evaluating Webhook Fan-out Services to Distribute Events at Scale](/blog/webhook-fanout-services.md): Webhook fan-out services for distributing events to multiple destinations
- [Building a Reliable Service for Sending Webhooks](/blog/building-reliable-outbound-webhooks.md): Building reliable outbound webhook infrastructure
- [Evaluating Webhook Infrastructure for Sending Webhooks](/blog/evaluating-webhook-infrastructure-for-sending-webhooks.md): Evaluating webhook infrastructure solutions
- [Dashboard v4: Built for Clarity and Speed](/blog/v4-dashboard.md): UI overhaul with real-time graphs and faster search.
- [Introducing Outpost: Open Source Outbound Webhooks and Event Destinations Infrastructure](/blog/outpost-open-source-webhooks-event-destinations-infrastructure.md): Announcing open-source outbound webhook delivery infrastructure.
- [What is an MCP Gateway?](/blog/mcp-gateway.md): Hookdeck's MCP
- [Source Types: A Simpler, Smarter Way to Configure Your Webhook Event Sources](/blog/source-types.md): New presets for Stripe, GitHub, Shopify, and more.
- [Enhanced Webhook Delivery Retry Configuration](/blog/enhanced-retries.md): Retry feature improvements.
- [Asynchronous AI: Why Event Callbacks Are the Future of GenAI APIs](/blog/asynchronous-ai.md): Using webhooks to decouple long-running LLM jobs.
- [Introducing Organizations, Projects, and Project Throughput](/blog/introducing-organizations.md): Multi-project, multi-team permission model.
- [Introducing the Event Gateway](/blog/introducing-the-event-gateway.md): Launch post for Hookdeck's managed ingress layer.
- [Hookdeck Source Verification](/blog/hookdeck-integrations.md): New integrations on Hookdeck. 

## Changelog
- [Changelog](https://hookdeck.com/changelog): Product updates across Event Gateway, Outpost, and the Hookdeck platform, newest first.
- [Sentry integration](/changelog/sentry-integration.md): Sync your Hookdeck issues with Sentry, both ways
- [NATS JetStream](/changelog/outpost-nats-jetstream.md): Run Outpost's internal queues on NATS JetStream
- [New destinations](/changelog/outpost-eventbridge-cloudflare-queues.md): Deliver events to AWS EventBridge and Cloudflare Queues
- [Destination proxies](/changelog/outpost-destination-proxies.md): Route webhook, RabbitMQ and Kafka deliveries through proxies
- [Binary & multipart](/changelog/binary-and-multipart.md): Delivery of files, images, and form uploads
- [Trigger exclusions](/changelog/issue-trigger-exclusions.md): Exclude resources from issue triggers with negated patterns
- [Hookdeck CLI v3](/changelog/cli-v3.md): Event Gateway write mode and Outpost commands
- [Delivery latency](/changelog/outpost-delivery-latency.md): Track how long each destination takes to respond
- [HIPAA compliant](/changelog/hipaa-support.md): Send PHI through Event Gateway and Outpost
- [Compat signatures](/changelog/outpost-compat-signatures.md): Change webhook signature schemes without breaking receivers
- [Email recipients](/changelog/issue-email-recipients.md): Send issue trigger emails to selected project members
- [Delivery groups](/changelog/delivery-groups.md): Stop noisy neighbors with per-tenant delivery rates
- [Platform API](/changelog/api-key-permissions.md): Manage orgs and projects via API. Scope any key
- [Delivery timeouts](/changelog/extended-timeouts.md): Custom per-destination timeouts up to 15 minutes
- [Charts and dates](/changelog/charts-and-dates.md): Synchronized chart interactions, accurate queue metrics, and personal date and time settings
- [HEAD & QUERY methods](/changelog/head-query.md): Sources now accept HEAD and QUERY requests
- [Replay requests](/changelog/replay-events.md): Re-ingest a request as a new request, routed to the connections you choose
- [Metric fixes](/changelog/pending-metrics-fix.md): Fixed oldest pending and pending count metrics in the dashboard
- [Dashboard updates](/changelog/dashboard-improvements.md): A denser layout, collapsible sidebar, better date picker and improved metrics
- [incident.io](/changelog/incidentio-notifications.md): Create and sync incidents in incident.io directly from Hookdeck issues
- [Hookdeck Outpost](/changelog/hookdeck-outpost.md): Send webhooks and events to users
- [Operator Events](/changelog/operator-events.md): Receive events from your Outpost deployment such as tenant subscriptions and failure alerts
- [Self-serve Static IP](/changelog/self-serve-static-ip.md): Enable Static IP directly from your project settings
- [Hookdeck CLI v2](/changelog/cli-v2.md): Embedded MCP server, new issue & metrics commands
- [Better Stack Uptime](/changelog/betteruptime-notifications.md): Receive issue notifications directly in Better Stack Uptime
- [Discord integration](/changelog/discord-notifications.md): Receive issue notifications directly in Discord
- [Request issues](/changelog/request-issues.md): Monitor and respond to request problems
- [Improved search](/changelog/improved-search.md): Find any request property with unstructured search
- [Multi-Factor Auth](/changelog/multi-factor-authentication.md): Organizations can now require MFA
- [Webhook Skills](/changelog/webhook-skills.md): Open-source skills for AI coding agents
- [Metrics API](/changelog/metrics-api.md): Query Hookdeck metrics via HTTP
- [Custom columns](/changelog/custom-columns.md): Add unique payload fields to request and event lists
- [GCP Service Account](/changelog/gcp-service-account-auth-type.md): Authenticate to Google Cloud services using service account credentials
- [New Relic export](/changelog/new-relic-metrics-export.md): Export metrics to New Relic
- [Quick filters](/changelog/quick-filters.md): Filter lists directly from sidebar payload values
- [CLI v1.1.0](/changelog/cli-v1-1-0.md): Better local webhook debugging with session filters and interactive mode
- [New Slack issues](/changelog/slack-issue-status-update.md): Update issue status directly from the Slack notifications
- [Deduplication arrays](/changelog/deduplication-arrays.md): Support array elements in field-based deduplication rules
- [Prometheus export](/changelog/prometheus-export.md): Export metrics via Prometheus and monitor with Grafana
- [Cancel events](/changelog/cancellations.md): Cancel upcoming delivery attempts for your events
- [Teams integration](/changelog/microsoft-teams-notifications.md): Receive issue notifications directly in Microsoft Teams
- [Deduplication](/changelog/deduplication.md): Ignore redundant events with configurable matching strategies
- [New Changelog](/changelog/new-changelog.md): Stay updated with latest features directly in your dashboard
- [Free metrics](/changelog/free-metrics.md): Access metrics for your sources, connections & destinations
- [Rule ordering](/changelog/transformation-order.md): You can now choose whether transformation rules run before or after filters.
- [Dashboard v4](/changelog/dashboard-v4.md): We've rolled out a major update to the dashboard!

## Learn 
### Event-Driven Architecture
- [Building a virtual pet for repo health with GitLab webhooks](/blog/gitlab-webhooks-virtual-pet-repo-health.md): Webhooks by Example episode two use case with GitLab project webhooks: Standard Webhooks signing tokens, event-type routing, emoji events, fan-out loop guards, agent-written handlers behind draft MRs, and automating webhook setup.
- [Shopify Next Generation Events: Devs react to the biggest webhook overhaul in years](/blog/shopify-next-generation-events-community-take.md): Community livestream recap of Shopify's Next Generation Events developer preview, which replaces topic-based webhooks with filterable, GraphQL-defined event subscriptions. Covers webhook volume and cost (AWS bills dominated by ingest), the kitchen-sink rollout, where complexity relocates under the new model, open reliability questions around delivery guarantees and reconciliation, migration strategies, GraphQL-based subscription management, and how the shift from 'webhooks' to 'events' echoes patterns seen at Stripe and beyond.
- [How Knock uses Orb webhooks for usage-based upgrade nudges](/blog/knock-orb-usage-based-upgrade-nudges.md): Webhooks by Example episode one case study on using Orb subscription usage webhooks with enrichment, refetch-before-process, branching workflows, and idempotency for usage-based customer messaging.
- [Building Reliable MCP Servers: Handling Async Events and Webhooks](/blog/mcp-event-gateway.md): Analysis of the async event handling gap in MCP server architecture. Covers MCP Tasks, Streamable HTTP transport limitations, MCP Gateway blind spots for inbound events, and how webhook infrastructure (Event Gateway) provides reliable ingestion, deduplication, retry, and observability for production MCP servers.
- [Webhooks at Scale: Best Practices and Lessons Learned](/blog/webhooks-at-scale.md): Strategies and considerations for scaling webhook infrastructure to handle high-volume webhook traffic and complex routing requirements
- [Why Reliable Webhook Infrastructure Matters](/blog/reliable-webhook-infrastructure.md): Comprehensive guide to building reliable webhook infrastructure covering architecture, error handling, monitoring, and best practices
- [Introducing The Event Destinations Initiative](/blog/event-destinations-initiative.md): Details about Hookdeck's initiative to improve event destination handling and management capabilities
- [What are Event Destinations?](/blog/event-destinations.md): Overview of event destination management and routing strategies for effective event-driven architecture implementations
- [Navigating Event-Driven Architecture: A Guide to Choosing the Right Infrastructure](/blog/choosing-eda-infrastructure.md): Guide to selecting the right event-driven architecture infrastructure, covering message brokers, streaming platforms, event gateways, and storage options with recommendations based on solution needs
- [Aug 28-29th incident: Reaffirming our commitment to reliable async messaging infrastructure](/blog/reliable-asynchronous-messaging-infrastructure.md): Guide to building robust asynchronous messaging systems with reliability, error handling, and scalability considerations
- [Detecting and Handling Delivery Errors in your Event-Driven Architecture](/blog/detecting-error-handling-event-driven-architecture.md): Examines different types of message delivery errors in EDA, their mitigation strategies, and how to build robust error handling throughout the message lifecycle
- [Event-Driven Architecture Fundamentals and Common Pitfalls (and How to Avoid Them)](/blog/event-driven-architecture-fundamentals-pitfalls.md): Comprehensive guide covering EDA fundamentals, message patterns, event design principles, and common pitfalls with solutions
- [Message Queues: Deep Dive](/blog/message-queues-deep-dive.md): Advanced exploration of message queue architectures, patterns, and implementation considerations for production systems
- [Introduction to Messages Queues](/blog/introduction-message-queue.md): Beginner-friendly introduction to message queues, covering what they are, how they work, and their role in distributed systems
- [Web Scalability for Beginners](/blog/web-scalability-beginners.md): A comprehensive guide covering web scalability fundamentals, from handling growing user bases to implementing strategies like vertical/horizontal scaling, CDNs, and asynchronous processing with message queues
- [Introduction to Asynchronous Processing](/blog/introduction-asynchronous-processing.md): Fundamental guide to asynchronous processing concepts, benefits, and implementation strategies for scalable applications

### Webhook Guides
- [How Developers Connect Webhooks to AI Agents, MCP Servers, and LLM Tools](/webhooks/guides/webhooks-ai-agents-integration-patterns.md): Guide to the patterns developers use to connect webhooks to AI agents, MCP servers, and LLM tools: provider callbacks (OpenAI, Gemini, Claude), webhook-triggered agents, MCP async results, pushing events into live agent sessions, and outbound agent/A2A notifications — plus the shared authentication, delivery, ordering, retry, and observability failure modes and how Hookdeck addresses them.
- [Webhook Infrastructure: What It Takes to Receive and Send Events Reliably at Scale](/webhooks/guides/webhook-infrastructure-guide.md): Comprehensive guide to webhook infrastructure covering inbound and outbound event handling, reliability challenges, retry logic, idempotency, security, observability, build vs buy, and how Hookdeck's Event Gateway, Outpost, CLI, and Console address each layer
- [Webhook Management: A Developer's Guide to Reliable Event Infrastructure](/webhooks/guides/webhook-management.md): Comprehensive guide to webhook management covering why it gets hard at scale (reliability, observability, security, fan-out, inconsistent providers, local development), and how Hookdeck's Event Gateway, Outpost, CLI, and Console address each challenge from local development through production
- [Event Gateway vs. Event Mesh: Understanding the Differences](/webhooks/guides/event-gateway-vs-event-mesh.md): Comparison of event gateways and event meshes covering scope, operational model, protocol support, multi-environment routing, use cases, and whether they are complementary or competing technologies
- [Event Gateway vs. Message Broker: When to Use Which](/webhooks/guides/event-gateway-vs-message-broker.md): Comparison of event gateways and message brokers (Kafka, RabbitMQ) covering architecture differences, operational overhead, HTTP vs protocol-native communication, delivery semantics, observability, and when to use each
- [How to Migrate to a Webhook Gateway](/webhooks/guides/how-to-migrate-to-a-webhook-gateway.md): Step-by-step migration guide from DIY webhook infrastructure to a managed webhook gateway covering integration inventory, parallel running, incremental cutover, deduplication, and common pitfalls
- [Webhook Fan-Out and Multicasting](/webhooks/guides/webhook-fan-out-and-multicasting.md): Guide to webhook fan-out and multicasting covering distribution patterns, DIY implementation approaches, partial delivery failures, deduplication, observability challenges, and gateway-based solutions
- [Webhook Gateway Security Architecture](/webhooks/guides/webhook-gateway-security-architecture.md): Guide to webhook gateway security architecture covering centralized signature verification, replay prevention, payload validation, rate limiting, network isolation, and secrets management across multiple providers
- [Webhook Gateway vs. API Gateway: What's the Difference?](/webhooks/guides/webhook-gateway-vs-api-gateway.md): Comparison of webhook gateways and API gateways covering communication models, failure handling, rate limiting, authentication, feature differences, and when to use each
- [How Managed Webhook Services Implement Exactly-Once Delivery](/webhooks/guides/how-managed-webhook-services-implement-exactly-once-delivery.md): Explanation of how managed webhook services implement exactly-once processing using deduplication, idempotency keys, retry strategies, ordering controls, and layered defense patterns
- [Managed Webhook Gateway vs DIY Queue-Backed Infrastructure](/webhooks/guides/managed-webhook-gateway-vs-diy-queue-backed-infrastructure.md): Comparison of managed webhook gateways versus DIY queue-backed infrastructure covering retries, dead-letter queues, observability, routing, and delivery guarantees
- [Webhook Observability Architecture for Production Systems](/webhooks/guides/webhook-observability-architecture.md): Guide to designing webhook observability architecture covering metrics, dashboards, event tracing, replay workflows, alerting strategies, and integration with monitoring platforms
- [Implementing Webhook Retries](/webhooks/guides/webhook-retry-best-practices.md): Comprehensive guide to webhook retry strategies including exponential backoff, jitter, response code awareness, dead-letter queues, circuit breakers, and observability
- [Webhook Ordering: Why It's Hard and How to Handle It](/webhooks/guides/webhook-ordering-why-its-hard-and-how-to-handle-it.md): Guide to understanding webhook ordering challenges and strategies for handling out-of-order delivery
- [Why Your Microservices Architecture Needs an Event Gateway](/webhooks/guides/why-your-microservices-architecture-needs-an-event-gateway.md): Explains why microservices need event gateways for reliable webhook communication, covering failure modes, the event gateway pattern, and evaluation criteria
- [At-Least-Once vs. Exactly-Once Webhook Delivery Guarantees](/webhooks/guides/webhook-delivery-guarantees.md): Explains webhook delivery guarantee semantics, the impossibility of exactly-once delivery, and how to achieve exactly-once processing through idempotency
- [Dead-Letter Queues for Webhook Reliability](/webhooks/guides/dead-letter-queues-webhook-reliability.md): Guide to implementing dead-letter queues for reliable webhook processing and event recovery
- [Alternatives to Dead-Letter Queues for Webhook Reliability](/webhooks/guides/alternatives-to-dead-letter-queues.md): Guide to alternative patterns for handling failed webhook events beyond traditional dead-letter queues
- [What Are Thin Events?](/webhooks/guides/what-are-thin-events.md): Explanation of thin events as a notification-only webhook pattern and comparison with fat events
- [Best Practices for Working With Thin Events](/webhooks/guides/best-practices-thin-events.md): Comprehensive guide on implementing thin events in webhook systems, including the fetch-before-process pattern, error handling, idempotency, and operational best practices
- [Webhooks Glossary](/webhooks/guides/webhooks-glossary.md): Comprehensive glossary covering webhook terminology, event-driven architecture concepts, and Hookdeck
- [Webhooks Fetch Before Process Pattern](/webhooks/guides/webhooks-fetch-before-process-pattern.md): Explanation of the fetch-before-process pattern for webhook handling and its benefits
- [Understanding Webhooks and Callbacks](/webhooks/guides/webhooks-callbacks.md): Comparison between webhooks and callbacks covering use cases, benefits, and implementation differences
- [What is a Webhook Gateway?](/webhooks/guides/webhook-gateway.md): Explanation of webhook gateways and their role in managing webhook infrastructure
- [Webhook Handshakes and Challenges](/webhooks/guides/webhook-handshakes-challenges.md): Guide to webhook handshake protocols and challenge-response mechanisms for security
- [What is an Event Gateway? The Definitive Guide](/webhooks/guides/event-gateway.md): Comprehensive guide to event gateways covering definition, core capabilities, use cases, comparison with API gateways, message brokers, and event meshes, evaluation criteria, architecture overview, and getting started guidance
- [How to Take Control of Your Webhook Reliability](/webhooks/guides/taking-control-of-your-webhook-reliability.md): Strategies for improving webhook reliability including infrastructure design and operational practices
- [How Hookdeck Solves the Hardest Webhook Challenges](/webhooks/guides/hookdeck-the-modern-queueing-solution-for-your-webhooks.md): Overview of common webhook challenges (reliability, observability, security, ordering, scaling, testing, sending) and how Hookdeck's two products — Event Gateway for receiving and Outpost for sending — solve each one, with links to detailed guides and product documentation
- [How to Choose a Solution for Queuing Your Webhooks](/webhooks/guides/how-to-choose-a-solution-for-queuing-your-webhooks.md): Guide to selecting webhook queueing solutions covering features, scalability, and implementation considerations
- [Why Relying on Webhook Providers Is Not The Answer](/webhooks/guides/why-relying-on-webhook-providers-is-not-the-answer.md): Discussion of limitations in relying solely on webhook providers and the need for additional infrastructure
- [Why You Should Stop Processing Your Webhooks Synchronously](/webhooks/guides/why-you-should-stop-processing-your-webhooks-synchronously.md): Detailed explanation of why asynchronous webhook processing is superior to synchronous approaches for scalability and reliability
- [How to Choose a Strategy for Managing Webhooks](/webhooks/guides/how-to-choose-a-strategy-for-fixing-webhooks.md): Framework for developing webhook failure recovery strategies including analysis and resolution approaches
- [How to Handle Webhooks The Hookdeck Way](/webhooks/guides/how-to-handle-webhooks-the-hookdeck-way.md): Guide to implementing webhook handling using Hookdeck's approach and best practices
- [What Are The Costs of Managing Webhooks and What Is a Scalable Solution?](/webhooks/guides/what-are-the-costs-of-managing-webhooks-and-what-is-a-scalable-solution.md): Analysis of webhook management costs and scalable solutions for different organizational needs
- [Why Webhooks Are Difficult to Manage in Production](/webhooks/guides/why-webhooks-are-difficult-to-manage-in-production.md): Explores the challenges of managing webhooks in production environments including failure scenarios, reliability issues, and scalability concerns
- [Introduction to Webhook Problems](/webhooks/guides/introduction-to-webhook-problems.md): Overview of common webhook problems including delivery failures, security issues, and reliability challenges with practical solutions
- [Managing](/webhooks/guides/managing.md): Comprehensive guide to webhook management covering lifecycle management, configuration, and operational practices
- [Error Recovery](/webhooks/guides/error-recovery.md): Strategies for webhook error recovery including retry mechanisms, dead letter queues, and failure handling patterns
- [Monitoring](/webhooks/guides/monitoring.md): Guide to webhook monitoring strategies including metrics collection, alerting, and performance tracking
- [Testing](/webhooks/guides/testing.md): Comprehensive guide to webhook testing methodologies and tools for different environments
- [Complete Guide to Webhook Security ](/webhooks/guides/complete-guide-to-webhook-security.md): Comprehensive security guide covering webhook vulnerabilities, authentication strategies, and protection mechanisms
- [What Are the Webhook Authentication Strategies?](/webhooks/guides/what-are-the-webhook-authentication-strategies.md): Detailed guide to webhook authentication methods including signature verification, API keys, and OAuth implementations
- [How to Implement SHA256 Webhook Signature Verification](/webhooks/guides/how-to-implement-sha256-webhook-signature-verification.md): Technical guide to implementing SHA256 signature verification for webhook security
- [Guide to Building or Buying Your Webhook Infrastructure](/webhooks/guides/guide-to-building-or-buying-your-webhook-infrastructure.md): Decision framework for building versus buying webhook infrastructure covering costs, complexity, and business considerations
- [Comparing Open Source and Cloud Services When Building a Webhook Management Infrastructure](/webhooks/guides/compare-open-source-and-cloud-services-building-webhook-management-infrastructure.md): Comparison of open source tools versus cloud services for building webhook management infrastructure
- [Webhook Infrastructure Performance Monitoring, Scalability Tuning and Resource Estimation](/webhooks/guides/webhook-infrastructure-performance-monitoring-scalability-resource.md): Guide to performance monitoring and scalability tuning for webhook infrastructure
- [What Are the Implementation Considerations for Webhook Producers](/webhooks/guides/what-are-the-implementation-considerations-for-webhook-producers.md): Guide for webhook producers covering design, reliability, and implementation best practices
- [What Are the Implementation Considerations for Message Queues When Processing Webhooks](/webhooks/guides/what-implementation-considerations-for-message-queues-in-processing-webhooks.md): Explores how to implement message queues for webhook processing including pattern selection and configuration considerations
- [Webhook Infrastructure Components and Their Functions](/webhooks/guides/webhook-infrastructure-components-and-their-functions.md): Detailed breakdown of webhook infrastructure components and their roles in the system
- [Webhook Infrastructure Requirements and Architecture](/webhooks/guides/webhook-infrastructure-requirements-and-architecture.md): Guide to designing webhook infrastructure covering architectural patterns, scalability requirements, and implementation considerations
- [What Causes Webhooks Downtime and How to Handle the Issues](/webhooks/guides/what-causes-webhooks-downtime-how-handle-issues.md): Analysis of webhook downtime causes and strategies for prevention and incident response
- [How to Solve Webhook Data Integrity Issues](/webhooks/guides/how-solve-webhook-data-integrity-issues.md): Guide to maintaining data integrity in webhook systems including idempotency, ordering, and consistency strategies
- [Best Practices When Deploying Webhooks in Production](/webhooks/guides/best-practices-deploy-webhooks-production.md): Production deployment best practices for webhooks covering monitoring, error handling, and operational considerations
- [Complete Guide to Webhook Testing](/webhooks/guides/complete-guide-webhook-testing.md): Comprehensive guide to testing webhooks covering local development, staging environments, and production testing strategies
- [How to Secure Webhooks: 5-Step Checklist](/webhooks/guides/webhooks-security-checklist.md): Practical security checklist for webhook implementations covering authentication, encryption, and vulnerability prevention
- [When to Use Webhooks, WebSocket, Pub/Sub, and Polling](/webhooks/guides/when-to-use-webhooks.md): Guide to determining when webhooks are the appropriate solution for different integration scenarios
- [How to Troubleshoot and Debug Webhooks: A Complete Guide](/webhooks/guides/troubleshooting-debugging-webhooks-tutorial.md): Complete webhook troubleshooting playbook covering common failure modes, systematic debugging steps, and practical code examples
- [Complete Guide to Troubleshooting and Debugging Webhooks](/webhooks/guides/guide-troubleshooting-debugging-webhooks.md): Comprehensive troubleshooting guide for webhook issues including debugging techniques and common problem resolution
- [How to Set Up a Webhook Tutorial](/webhooks/guides/setting-up-webhook-tutorial.md): Step-by-step tutorial for setting up webhooks from configuration to testing and deployment
- [What Are Webhooks and How Do They Work?](/webhooks/guides/what-are-webhooks-how-they-work.md): Fundamental guide to webhooks covering concepts, implementation, and use cases
- [How to Implement Webhook Idempotency](/webhooks/guides/implement-webhook-idempotency.md): Guide to implementing idempotency in webhook systems to prevent duplicate processing and ensure data consistency
- [Webhook Security Vulnerabilities Guide](/webhooks/guides/webhook-security-vulnerabilities-guide.md): Comprehensive analysis of webhook security vulnerabilities and mitigation strategies for secure webhook implementations
- [Why Implement Asynchronous Processing of Webhooks](/webhooks/guides/why-implement-asynchronous-processing-webhooks.md): Explains benefits of asynchronous webhook processing for scalability and reliability

### Outpost Guides
- [Send MCP Events Webhooks with Outpost](/docs/outpost/guides/send-mcp-events-webhooks-with-outpost.md): How to implement MCP Events webhook delivery (events/list, events/subscribe, events/unsubscribe) in an MCP server using Hookdeck Outpost: Standard Webhooks mode, one tenant per principal, one destination per subscription, destination filters from subscription arguments, secret rotation, TTL expiry, publishing the MCP event envelope, and testing with ChatGPT.
- [Webhook Versioning Strategies for Outbound Webhook Providers](/docs/outpost/guides/webhook-versioning-strategies.md): Guide to webhook versioning strategies including global API versioning, additive-only evolution, per-event-type versioning, and topic-based versioning with trade-offs and migration approaches
- [Why Alerting and Notifications Are Necessary for Outbound Webhook Providers](/docs/outpost/guides/webhook-alerting-and-notifications.md): Guide to implementing alerting and notifications for outbound webhook delivery, covering consecutive failure alerts, auto-disabling destinations, latency monitoring, and callback-based alert routing
- [Common Mistakes with Outbound Webhooks (And How to Avoid Them)](/docs/outpost/guides/common-outbound-webhook-mistakes.md): Guide to common mistakes outbound webhook providers make and best practices for building reliable webhook delivery
- [Why Outbound Webhook Providers Need Self-Serve Portals](/docs/outpost/guides/webhook-consumer-self-service-portal.md): Guide to building a self-service portal when sending webhooks to consumers covering destination management, event visibility, retries, and more
- [Why You Need Topics and Subscriptions When Sending Webhooks](/docs/outpost/guides/webhook-topics-and-subscriptions.md): Guide to webhook topics and subscriptions for event routing and filtering
- [Anatomy of a Good Webhook Payload](/docs/outpost/guides/webhook-payload-best-practices.md): Guide to designing webhook payloads including structure, headers, versioning, and common mistakes
- [Why Multi-Tenancy Matters for Outbound Webhooks (And How to Implement It)](/docs/outpost/guides/multi-tenancy-outbound-webhooks.md): Multi-tenancy for outbound webhooks with Hookdeck Outpost
- [Why Your Platform Needs Outbound Webhooks](/docs/outpost/guides/why-your-platform-needs-outbound-webhooks-and-how-to-ship-them.md): Guide to outbound webhooks for platforms including build vs buy analysis
- [Webhook Retry Best Practices for Sending Webhooks](/docs/outpost/guides/outbound-webhook-retry-best-practices.md): Webhook retry best practices for sending webhooks
- [Send Webhooks with Django](/docs/outpost/guides/send-webhooks-with-django-guide.md): Comprehensive overview of how to send webhooks with Django using Hookdeck's Outpost open-source event dispatcher.
- [Send Webhooks with Express.js](/docs/outpost/guides/send-webhooks-with-express-guide.md): Comprehensive overview of how to send webhooks with Express.js using Hookdeck's Outpost open-source event dispatcher.
- [Send Webhooks with FastAPI](/docs/outpost/guides/send-webhooks-with-fastapi-guide.md): Comprehensive overview of how to send webhooks with FastAPI using Hookdeck's Outpost open-source event dispatcher.
- [Send Webhooks with Flask](/docs/outpost/guides/send-webhooks-with-flask-guide.md): Comprehensive overview of how to send webhooks with Flask using Hookdeck's Outpost open-source event dispatcher.
- [Send Webhooks with Gin](/docs/outpost/guides/send-webhooks-with-gin-guide.md): Comprehensive overview of how to send webhooks with Gin using Hookdeck's Outpost open-source event dispatcher.
- [Send Webhooks with Go](/docs/outpost/guides/send-webhooks-with-go-guide.md): Comprehensive overview of how to send webhooks with Go using Hookdeck's Outpost open-source event dispatcher.
- [Send Webhooks with JavaScript](/docs/outpost/guides/send-webhooks-with-javascript-guide.md): Comprehensive overview of how to send webhooks with JavaScript using Hookdeck's Outpost open-source event dispatcher.
- [Send Webhooks with Koa](/docs/outpost/guides/send-webhooks-with-koa-guide.md): Comprehensive overview of how to send webhooks with Koa using Hookdeck's Outpost open-source event dispatcher.
- [Send Webhooks with NestJS](/docs/outpost/guides/send-webhooks-with-nestjs-guide.md): Comprehensive overview of how to send webhooks with NestJS using Hookdeck's Outpost open-source event dispatcher.
- [Send Webhooks with Next.js](/docs/outpost/guides/send-webhooks-with-next-guide.md): Comprehensive overview of how to send webhooks with Next.js using Hookdeck's Outpost open-source event dispatcher.
- [Send Webhooks with Node.js](/docs/outpost/guides/send-webhooks-with-node-guide.md): Comprehensive overview of how to send webhooks with Node.js using Hookdeck's Outpost open-source event dispatcher.
- [Send Webhooks with Python](/docs/outpost/guides/send-webhooks-with-python-guide.md): Comprehensive overview of how to send webhooks with Python using Hookdeck's Outpost open-source event dispatcher.

### Platform Guides
- [Guide to Auth0 Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-auth0-webhooks-features-and-best-practices.md): Comprehensive guide to Auth0 webhooks: Custom Log Streams (Custom Webhook stream under Monitoring > Streams, batched tenant log records with log_id and data.type codes such as s, f, ss, slo, sepft, JSON Lines/Array/Object content formats, up to three delivery attempts then restart until resolved, at-least-once delivery, unordered logs, auto-pause after 7 days of failures, Starting Cursor for backfill) and Event Streams (CloudEvents-format single events such as user.created, organization.member.added and group.created, POST /api/v2/event-streams, bearer/basic/custom-header authorization, four total attempts with 1s/2s/4s backoff, no retries on 4xx, auto-disable at 500 consecutive or 5000 total failures, Deliveries and Redelivery APIs). No HMAC signature: both send a static secret in the Authorization header, compared with a timing-safe check; Hookdeck's Auth0 source matches the exact Authorization header value.
- [Guide to Checkout.com Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-checkout-com-webhooks-features-and-best-practices.md): Comprehensive guide to Checkout.com webhooks: 140+ snake_case event types (payment_approved, payment_captured, payment_refunded, dispute_received, fraud_reported, authentication_approved and more), the { id, type, version, created_on, data, _links } envelope with evt_ event ids, Dashboard (Developers > Webhooks) vs Workflows API (POST /workflows with a webhook action) configuration, HMAC-SHA256 hex signatures over the raw body in Cko-Signature keyed with a webhook signature key (not the sk_ secret key), an optional static Authorization header key, no timestamp or replay window, a 10-second acknowledgment budget, up to 8 retries over roughly 30 hours, at-least-once and unordered delivery, and production best practices.
- [Guide to Knock Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-knock-webhooks-features-and-best-practices.md): Comprehensive guide to Knock outbound webhooks: message lifecycle events (message.sent, message.delivered, message.undelivered, message.bounced, message.read, message.link_clicked and more) plus workflow, email_layout, translation, source_event_action and partial update/commit events, the { __typename, type, created_at, data, event_data } envelope with the type mirrored in x-knock-event, dashboard creation under Platform > Webhooks scoped to one environment, per-webhook signing secrets, HMAC-SHA256 base64 signatures over timestamp.body in x-knock-signature as t=<milliseconds>,s=<signature>, a 5-minute replay window, retries on non-2xx over a few hours except for 301-303 and 400-405, Retry-After support on 429, delivery logs, and production best practices.
- [Guide to Deepgram Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-deepgram-webhooks-features-and-best-practices.md): Comprehensive guide to Deepgram webhooks (callbacks): the per-request callback query parameter on /v1/listen, /v1/speak and /v1/read, the immediate request_id response, callback bodies that match the synchronous response ({ metadata, results } with metadata.request_id), callback_method=put to switch from POST to PUT, the extra parameter for correlation data (returned in metadata.extra, 2048 characters per key-value pair), no signatures and no event-type field, Basic Auth credentials embedded in the callback URL (sent as an Authorization: Basic header) as the recommended protection, the optional dg-token header carrying the API Key Identifier (not guaranteed on every callback), up to 10 retries 30 seconds apart on non-2xx responses, callback ports limited to 80, 443, 8080 and 8443, and production best practices.
- [Guide to Mollie Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-mollie-webhooks-features-and-best-practices.md): Comprehensive guide to Mollie webhooks: classic webhooks (per-resource webhookUrl, unsigned application/x-www-form-urlencoded body carrying only id=tr_..., fetch-to-confirm via GET /v2/payments/{id}) vs next-gen webhooks (subscriptions created in Developers > Webhooks or POST /v2/webhooks with eventTypes or *, JSON event envelope with resource, id, type, entityId, createdAt, _links and an optional _embedded snapshot), X-Mollie-Signature as sha256=<hex HMAC-SHA256 of the raw body>, two signature headers during a 24-hour secret rotation, event types (payment.paid, payment-link.paid, sales-invoice.*, payout.*, balance-transaction.created, beta refund.*, dispute.*), 15-second timeout, 10 attempts over about 26 hours, blocked status after repeated failures, and production best practices.
- [Guide to Ordinal Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-ordinal-webhooks-features-and-best-practices.md): Comprehensive guide to Ordinal (tryordinal.com) webhooks: 20 event types (post.published, post.publish_failed, post.created, post.approval.requested, post.comment.created, social_profile.reconnect_needed, invite.accepted and more), the { type, data, createdAt } envelope with one key under data per event family (profile, post, comment, approval, invite), dashboard vs REST API creation (POST https://app.tryordinal.com/api/v1/webhooks with name, url, topics, headers), no HMAC signature or signing secret, authentication via static custom headers you configure and compare in constant time, no event id for deduplication, any 2xx to acknowledge, undocumented retry policy and timeout, and production best practices.
- [Guide to Tikkie Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-tikkie-webhooks-features-and-best-practices.md): Comprehensive guide to Tikkie (ABN AMRO) API v2 notifications: notificationType PAYMENT, REFUND and BUNDLE in the body (no event-type header), a flat JSON body carrying only subscriptionId and tokens (paymentRequestToken, paymentToken, refundToken, bundleId) with no amount, status, timestamp or event id, subscription via POST /paymentrequestssubscription and /transactionssubscription with API-Key and X-App-Token headers (one active subscription each, a repeat POST overwrites the URL), no signature, secret, HMAC or IP allowlist, mitigations via subscriptionId check, re-fetching the record from the Tikkie API and a hard-to-guess URL, best-effort delivery with a maximum of three attempts, deduplication on paymentToken, refundToken or bundleId, reconciliation polling, and production best practices.
- [Guide to Volume Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-volume-webhooks-features-and-best-practices.md): Comprehensive guide to Volume (getvolume.com) pay-by-bank webhooks: HTTP PUT deliveries (not POST) to the URL in the merchant's application configuration, final payment statuses COMPLETED, SETTLED (virtual accounts only) and FAILED in the paymentStatus body field with no event-type header or event ID, the flat payload (paymentId, merchantPaymentId, paymentRequest.amount in major units, currency, errorDescription, paymentMetadata, applicationId), SHA256withRSA signatures (RSA PKCS#1 v1.5 with SHA-256, standard base64) over the raw body in the Authorization header as 'SHA256withRSA <signature>', separate sandbox and live public keys served as bare base64 SPKI from /.well-known/signature/pem on api.sandbox.volumepay.io and api.volumepay.io, published source IPs, redelivery until a 200 response, reconciling amount, currency and merchantPaymentId against your own records, idempotency on paymentId plus paymentStatus, and production best practices.
- [Guide to Quo Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-quo-webhooks-features-and-best-practices.md): Comprehensive guide to Quo webhooks (quo.com, the business phone platform formerly known as OpenPhone): Quo runs two webhook generations side by side, the current versioned API (Quo-Api-Version 2026-03-30) using Standard Webhooks style webhook-id, webhook-timestamp and webhook-signature headers over {id}.{timestamp}.{raw body} with a whsec_ prefixed base64 secret and second-precision timestamps, and the legacy OpenPhone-era openphone-signature header of the form hmac;1;{timestamp};{signature} over {timestamp}.{raw body} with a bare base64 secret and millisecond timestamps, both HMAC-SHA256 with a standard base64 digest over the raw body; 28 documented event types across message, call, call AI or media, contact and task families plus two underscored legacy task aliases; the data.resource, data.context and data.links envelope versus the legacy data.object envelope; a 10 second response budget and eight retry attempts spanning roughly 27 hours 35 minutes; deduplication on the per-delivery webhook-id header rather than the shared event id; unordered delivery even within one resource; a 50 webhook per workspace cap; no verification handshake and no documented IP allowlist; plus production best practices.
- [Guide to Formstack Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-formstack-webhooks-features-and-best-practices.md): Comprehensive guide to Formstack Forms webhooks (the WebHook submit action): HMAC-SHA256 over the raw request body rendered as lowercase hex with a sha256= prefix in the X-FS-Signature header, which the Custom HMAC Header field can rename (confirmed against real deliveries); the separate Shared Secret is not a signing key and arrives in the body as a HandshakeKey field; signing is optional and off by default, so handlers must fail closed; there are no event types at all, because a WebHook fires only on a form submission, so handlers route on FormID and dedupe on UniqueID; the default application/x-www-form-urlencoded content type means the digest covers the raw urlencoded bytes and re-encoding a parsed dict never matches; there is no timestamp or nonce in the signed content, so deliveries are replayable indefinitely; the payload is a flat map keyed by the form's own field labels, with duplicate labels collapsing to the last occurrence unless field IDs are used; and X-FS-Signature collides with FastSpring's unrelated base64 scheme.
- [Using Hookdeck with Grok Bot: Reliable Webhook Triggers for Your AI Teammate](/webhooks/platforms/using-hookdeck-with-grok-bot-reliable-webhook-triggers.md): Guide to connecting webhook providers to Grok Bot routines through Hookdeck, covering the webhook trigger's URL and Bearer key, its response codes, and how the Event Gateway adds verification, filtering, deduplication, rate limiting, payload transformation, and observability.
- [Guide to Cronofy Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-cronofy-webhooks-features-and-best-practices.md): Comprehensive guide to Cronofy webhooks (push notifications): notification channels and callback_url, base64 HMAC-SHA256 signing with the OAuth client secret, the comma-separated Cronofy-HMAC-SHA256 header used for secret rotation, the six channel notification types plus smart_invite and event_subscription on other callback surfaces, why change is a thin notification requiring a Read Events follow-up on changes_since, the 5-second timeout and 24-hour retry window that closes channels, multi-region data centres, and production best practices.
- [Guide to MailerSend Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-mailersend-webhooks-features-and-best-practices.md): Comprehensive guide to MailerSend webhooks: HMAC-SHA256 hex signature verification with the Signature header over the raw body, the webhook.test URL validation ping signed with the fixed public test_Am3L1GuOIc4blLUuHqAPxxwkZaJyEk8G secret, the 26 documented email and SMS activity events, the data.meta empty-array quirk and two created_at formats, the 3-second response deadline, three-day retries and automatic pausing, and production best practices.
- [Guide to Supabase Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-supabase-webhooks-features-and-best-practices.md): Comprehensive guide to Supabase webhooks: Database Webhooks fired by Postgres triggers through pg_net with no signature and no retries, Auth Hooks signed with Standard Webhooks HMAC-SHA256 using webhook-id, webhook-timestamp and webhook-signature headers, the v1,whsec_ secret format, the request/response semantics and 5-second budget of Auth Hooks, and production best practices.
- [Build, Test, and Debug Cronofy Webhooks on Localhost](/webhooks/platforms/build-test-and-debug-cronofy-webhooks-on-localhost.md): Guide to building and debugging a Cronofy Push Notifications integration during local development with the Hookdeck CLI. Explains the change notification, which carries only a changes_since timestamp and requires a Read Events call to find what changed, then builds the handler that acknowledges within five seconds and queues the work, and the worker that pages through Read Events with include_deleted and include_managed and upserts by event_uid, in Node.js, Python, Go, Ruby, PHP and Java. Also covers triggering test notifications from the Cronofy developer dashboard and the Hookdeck Console, inspecting payloads, using retry to iterate without re-triggering events, verifying the Cronofy-HMAC-SHA256 signature including the comma-separated form used during secret rotation, bookmarking notification types that cannot be triggered on demand, testing idempotency, and keeping a notification channel from closing after 24 hours of failed deliveries.
- [Guide to Azure Event Grid Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-azure-event-grid-webhooks-features-and-best-practices.md): Comprehensive guide to Azure Event Grid webhooks: the SubscriptionValidationEvent echo handshake and the CloudEvents v1.0 OPTIONS abuse-protection preflight, why Event Grid does not sign payloads at all, authenticating deliveries with delivery-property headers, query-parameter client secrets or Microsoft Entra ID bearer tokens, the aeg-* delivery headers, Event Grid schema arrays vs CloudEvents objects, and production best practices.
- [Guide to Community.com Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-community-webhooks-features-and-best-practices.md): Comprehensive guide to Community (community.com) webhooks: deliveries are signed with a community-signature header of the form t=<unix>,v1=<hex>, where v1 is a lowercase hex HMAC-SHA256 over the timestamp, a literal period, and the raw request body, keyed with a per-webhook signature secret from the dashboard; five documented event types cover message.inbound, message.outbound, member.created, member.updated and member.deleted; the envelope carries id, type, object, created and api_version with the payload under data.object; delivery is at-least-once with a documented dedupe requirement on the event id, a 15 second response budget, five retries over an hour, and automatic disabling after sustained failure; webhooks are plan-gated and configurable only in the dashboard; there is no official SDK verification helper; plus production best practices.
- [Guide to Calendly Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-calendly-webhooks-features-and-best-practices.md): Comprehensive guide to Calendly webhooks: the Calendly-Webhook-Signature header (t=<timestamp>,v1=<signature>) verified by computing HMAC-SHA256 (hex) over {timestamp}.{raw body} with the subscription's signing key, timing-safe comparison, ~3-minute replay tolerance, the event envelope (event, created_at, created_by, payload), common events (invitee.created, invitee.canceled, invitee_no_show.created, invitee_no_show.deleted, routing_form_submission.created), API-only subscription creation via POST /webhook_subscriptions on a Standard plan or higher, per-subscription signing keys, no official SDK verification helper, and production best practices.
- [Guide to Clerk Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-clerk-webhooks-features-and-best-practices.md): Comprehensive guide to Clerk webhooks: Svix-powered delivery using the Standard Webhooks protocol with svix-id, svix-timestamp, and svix-signature headers, HMAC-SHA256 signatures over id.timestamp.rawBody with a whsec_ base64 secret, the five-field envelope (data, object, type, instance_id, timestamp), user, session, and organization events, at-least-once unordered delivery with retries for up to 3 days, dashboard replay, raw-body verification requirements, and production best practices.
- [Guide to Hugging Face Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-huggingface-webhooks-features-and-best-practices.md): Comprehensive guide to Hugging Face webhooks: shared-secret verification via the X-Webhook-Secret header (no HMAC, secret sent verbatim, timing-safe comparison, optional ?secret= query parameter, ASCII-only secrets), events identified by event.scope plus event.action across repo, repo.content, repo.config, discussion, and discussion.comment scopes on models, datasets, and Spaces, the payload envelope with repo, discussion, comment, updatedRefs, updatedConfig, and webhook objects, the 1,000-triggers-per-24-hours rate limit, manual Replay from the Activity tab, and production best practices.
- [Guide to Klaviyo Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-klaviyo-webhooks-features-and-best-practices.md): Comprehensive guide to Klaviyo webhooks: system webhooks created via the Webhooks API are signed with a hex HMAC-SHA256 over the raw body with the Klaviyo-Timestamp header value appended, delivered in the Klaviyo-Signature header and keyed with a user-chosen endpoint secret of at least 16 characters; topics are prefixed event:klaviyo. and span email, SMS, push, and reviews; payloads batch up to 1,000 events in a data array with per-event external_id idempotency keys; the older flow Webhook action is unsigned and secured with a URL token; there is no official SDK verification helper; plus production best practices.
- [Guide to Webflow Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-webflow-webhooks-features-and-best-practices.md): Comprehensive guide to Webflow webhooks: trigger types (form_submission, site_publish, ecomm_new_order, collection_item_* and more), the { triggerType, payload } envelope, dashboard vs API creation, HMAC-SHA256 hex signatures over timestamp:body in x-webflow-signature with x-webflow-timestamp (milliseconds, 5-minute tolerance) available only on OAuth-app or API-created webhooks, OAuth client secret vs whsec_ webhook-specific secrets, 3 retries at 10-minute intervals, 30-second timeout, 256 KB payload cap, and production best practices.
- [Guide to Aircall Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-aircall-webhooks-features-and-best-practices.md): Comprehensive guide to Aircall webhooks: no HMAC signature exists, verification is a timing-safe comparison of the token field inside the JSON body, the five-field envelope (resource, event, timestamp, token, data), 67 events across calls, users, numbers, contacts, messaging, conversation intelligence, AI voice agent, and analytics, the 5-second response timeout, at-least-once unordered delivery, auto-disable after repeated failures (Aircall's docs give 50 retries, 50 consecutive failures, or 10 failed requests) with re-enable within 12 hours, and production best practices.
- [Guide to BaseLinker Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-baselinker-webhooks-features-and-best-practices.md): Comprehensive guide to BaseLinker (Base.com) webhooks: deliveries arrive as HTTP HEAD requests with no body, the payload is in the query string (observed params order_id and state, undocumented by BaseLinker), there is no signature verification of any kind, responses must be a bare bodyless 200, and order detail comes from the API via getOrders with X-BLToken. Includes framework wiring for HEAD routes and polling getJournalList for complete change tracking.
- [Guide to Google Cloud Pub/Sub Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-google-pubsub-webhooks-features-and-best-practices.md): Comprehensive guide to Google Cloud Pub/Sub push subscription webhooks: no HMAC signature exists, authentication is an opt-in Google-signed RS256 OIDC token (verify signature, aud, iss in both forms, email, and email_verified), the base64 message envelope, status-code acknowledgement with a 10-second default ack deadline, at-least-once delivery with messageId deduplication, and production best practices.
- [Guide to Vapi Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-vapi-webhooks-features-and-best-practices.md): Comprehensive guide to Vapi (voice AI) webhooks via the Server URL: opt-in per-endpoint authentication (Bearer Token shared secret, legacy X-Vapi-Secret, OAuth 2.0 client credentials, or fully configurable HMAC with x-signature), the nested message.type envelope, the four bidirectional message types that require a JSON response body (assistant-request with a hard ~7.5s timeout, tool-calls, transfer-destination-request, knowledge-base-request), Server URL priority levels, and production best practices.
- [Using Hookdeck with Hermes: Reliable Webhooks for Your AI Agent](/webhooks/platforms/using-hookdeck-with-hermes-reliable-webhooks-for-your-ai-agent.md): Guide for integrating Hookdeck with the Hermes AI agent to provide a secure tunnel, persistent URLs, automatic retries, deduplication for every provider, and full observability for webhooks triggering agent runs.
- [Cloudflare Queues Alternatives for Webhooks: Hookdeck Event Gateway, Convoy, and Cloud Queues Compared](/webhooks/platforms/cloudflare-queues-alternatives-for-webhooks.md): Comparison of Cloudflare Queues alternatives for webhook ingestion and retries, analyzing Hookdeck Event Gateway, Convoy, AWS SQS, and Google Pub/Sub across signature verification, deduplication, per-event replay, dead letter handling, observability, and platform coupling to Cloudflare Workers.
- [Gadget Alternatives for Webhook Handling: Hookdeck Event Gateway Compared](/webhooks/platforms/gadget-alternatives-for-webhook-handling.md): Comparison of Gadget alternatives for webhook handling, analyzing Hookdeck Event Gateway against Gadget's bundled webhook processing across provider coverage, failure recovery, replay, observability, spike handling, and platform coupling, plus DIY queue-and-worker approaches.
- [Guide to Chargebee Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-chargebee-webhooks-features-and-best-practices.md): Comprehensive guide to Chargebee Billing webhooks: subscription and billing events (snake_case event_type), why Chargebee has no HMAC signature at all, the opt-in HTTP Basic Auth (off by default) and region IP allowlist options, the payload shape varying by api_version and chargebee_response_schema_type, and production best practices.
- [Guide to Cloudinary Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-cloudinary-webhooks-features-and-best-practices.md): Comprehensive guide to Cloudinary webhooks (notifications): upload and asset-management types, verifying the X-Cld-Signature header (a plain SHA hash of raw body + timestamp + api_secret, not a keyed HMAC; SHA-1 by default, SHA-256 opt-in) with the official SDK, the EdDSA v2 auth_scheme variant that stops sending the legacy header, and production best practices.
- [Guide to GoCardless Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-gocardless-webhooks-features-and-best-practices.md): Comprehensive guide to GoCardless webhooks: mandate, payment, and payout events delivered as an array of up to 250 events per POST with separate resource_type and action fields, verifying the Webhook-Signature header (HMAC-SHA256, hex, over the raw body, keyed with the endpoint secret used verbatim) using the official Node SDK, the 498 invalid-signature response, and production best practices.
- [Guide to FusionAuth Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-fusionauth-webhooks-features-and-best-practices.md): Comprehensive guide to FusionAuth webhooks: user and system events at event.type, verifying the X-FusionAuth-Signature-JWT header (a JWT whose request_body_sha256 claim is the base64 SHA-256 of the raw body, which you must compare against your own hash) with symmetric or asymmetric keys via JWKS, the transactional delivery model that can roll back and break login, and production best practices.
- [Guide to Scrapfly Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-scrapfly-webhooks-features-and-best-practices.md): Comprehensive guide to Scrapfly webhooks: one webhook per scrape/extraction/screenshot job, verifying the X-Scrapfly-Webhook-Signature header (HMAC-SHA256 hex in UPPERCASE, with a lowercase duplicate in X-Scrapfly-Webhook-Signature-Lowercase), the header-based resource-type discriminator, the two-step webhook_name registration, and production best practices.
- [Guide to Square Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-square-webhooks-features-and-best-practices.md): Comprehensive guide to Square webhooks: payment, order, invoice, and customer events, verifying the x-square-hmacsha256-signature header (base64 HMAC-SHA256 over the notification URL followed by the raw body, in that order, via the official SDK helper; the URL must match byte-for-byte), the per-subscription signature key (not the access token), the legacy x-square-signature SHA-1 header, and production best practices.
- [Guide to Vercel Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-vercel-webhooks-features-and-best-practices.md): Comprehensive guide to Vercel webhooks: deployment, project, and domain events, verifying the x-vercel-signature header (HMAC-SHA1, not SHA256, hex over the raw body), the three different secret sources (team webhook, Integration client secret, Log Drain secret), the raw-body handling on Next.js, and production best practices.
- [Guide to WorkOS Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-workos-webhooks-features-and-best-practices.md): Comprehensive guide to WorkOS webhooks: directory sync, connection, and user events in the top-level event field, verifying the WorkOS-Signature header (composite t=timestamp,v1=signature; HMAC-SHA256 hex over timestamp + '.' + raw body) via the official Node SDK constructEvent, the absence of an audit-log webhook, and production best practices.
- [Guide to Zoom Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-zoom-webhooks-features-and-best-practices.md): Comprehensive guide to Zoom webhooks: meeting, webinar, recording, and phone events, verifying the x-zm-signature header (HMAC-SHA256 hex with a v0= prefix over 'v0:timestamp:raw body' using the Secret Token), the CRC endpoint.url_validation handshake that recurs every 72 hours (six failures disable the subscription), and production best practices.
- [Guide to Cursor Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-cursor-webhooks-features-and-best-practices.md): Comprehensive guide to Cursor Cloud Agent webhooks: the statusChange event with FINISHED and ERROR statuses, verifying the X-Webhook-Signature header (HMAC-SHA256, sha256=<hex>, over the raw body) plus the X-Webhook-Id and X-Webhook-Event headers, and production best practices.
- [Guide to ElevenLabs Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-elevenlabs-webhooks-features-and-best-practices.md): Comprehensive guide to ElevenLabs webhooks: events (post_call_transcription, voice_removal_notice, voice_removal_notice_withdrawn, voice_removed), verifying the ElevenLabs-Signature header (t=timestamp,v0=signature, HMAC-SHA256 over timestamp + '.' + raw body, 30-minute tolerance) via the official @elevenlabs/elevenlabs-js SDK constructEvent, and production best practices.
- [Guide to Intercom Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-intercom-webhooks-features-and-best-practices.md): Comprehensive guide to Intercom webhooks: conversation, contact, and ticket topics, verifying the X-Hub-Signature header (HMAC-SHA1, sha1=<hex>, keyed with the app client_secret), the ping handshake on save, and production best practices.
- [Guide to Linear Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-linear-webhooks-features-and-best-practices.md): Comprehensive guide to Linear webhooks: issue-tracking events (Issue, Comment, Project, Cycle, IssueLabel, IssueSLA and more), verifying the Linear-Signature header (HMAC-SHA256 over the raw body, hex, no prefix), the webhookTimestamp replay check, and production best practices.
- [Guide to Mailchimp Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-mailchimp-webhooks-features-and-best-practices.md): Comprehensive guide to Mailchimp webhooks: list events (subscribe, unsubscribe, profile, upemail, cleaned, campaign), why Mailchimp has no signature, the GET URL-validation handshake, verifying the unguessable ?secret= query param with a timing-safe compare, the application/x-www-form-urlencoded payloads, and production best practices.
- [Guide to Orb Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-orb-webhooks-features-and-best-practices.md): Comprehensive guide to Orb webhooks: usage-based billing events (invoice.issued, subscription.created, customer.credit_balance_dropped and more), verifying the X-Orb-Signature header (HMAC-SHA256, hex, prefixed v1=, over the literal string v1:{X-Orb-Timestamp}:{raw body}), the per-endpoint secret, and production best practices.
- [Guide to Razorpay Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-razorpay-webhooks-features-and-best-practices.md): Comprehensive guide to Razorpay webhooks: payment, order, refund, and subscription events, verifying the X-Razorpay-Signature header (HMAC-SHA256 over the raw body, hex, keyed with the dashboard webhook secret) via the official Razorpay.validateWebhookSignature SDK method, separate Live and Test secrets, and production best practices.
- [Guide to Recurly Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-recurly-webhooks-features-and-best-practices.md): Comprehensive guide to Recurly webhooks: subscription and billing events, verifying the recurly-signature header (a millisecond timestamp plus one or more hex HMAC-SHA256 signatures over timestamp + '.' + raw body, any matching during 24h key rotation), why JSON payloads are signed but legacy XML is not, the additional HTTP Basic Auth and IP allowlist layers, and production best practices.
- [Guide to Resend Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-resend-webhooks-features-and-best-practices.md): Comprehensive guide to Resend webhooks: email lifecycle events (sent, delivered, delivery_delayed, bounced, complained, opened, clicked) plus inbound email.received, verifying the Svix signature (svix-id / svix-timestamp / svix-signature headers, whsec_ secret) via the official resend SDK webhooks.verify, and production best practices.
- [Guide to Replicate Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-replicate-webhooks-features-and-best-practices.md): Comprehensive guide to Replicate webhooks: prediction lifecycle events (start, output, logs, completed) configured per prediction via webhook_events_filter, verifying the Standard Webhooks signature (webhook-id / webhook-timestamp / webhook-signature headers, whsec_ base64 secret, base64 HMAC-SHA256 over id.timestamp.body, multiple signatures during rotation), and production best practices.
- [Guide to Ascend Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-ascend-webhooks-features-and-best-practices.md): Comprehensive guide to Ascend (insurance payments / premium financing) webhooks: the events, verifying the X-Ascend-Signature header (t=ts,v1=hex HMAC-SHA256 over timestamp + ':' + raw body, with the timestamp also in X-Ascend-Request-Timestamp), manual registration, and production best practices.
- [Guide to CloudSignal Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-cloudsignal-webhooks-features-and-best-practices.md): Comprehensive guide to CloudSignal (Cloudprinter.com's print-fulfilment webhook product, not cloudsignal.io) webhooks: PascalCase order and item events, authentication via a plaintext apikey field in the JSON body (a per-endpoint Webhook API key, not an HMAC signature), retries up to 100 times over 7 days, and production best practices.
- [Guide to Faundit Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-faundit-webhooks-features-and-best-practices.md): Comprehensive guide to Faundit (lost-and-found / returns) webhooks: the two events (item-status, request-status), verifying the current X-Faundit-Signature-Next header (HMAC-SHA256 hex over 'v1:<timestamp>:<body>' with the timestamp from X-Faundit-Timestamp), why to avoid the deprecated v0 header that signs only the timestamp, and production best practices.
- [Guide to PayPro Global Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-paypro-global-webhooks-features-and-best-practices.md): Comprehensive guide to PayPro Global webhooks (Instant Payment Notification / IPN): form-encoded POSTs verified with three layers (IP allowlist, HASH = MD5(OrderId+SecretKey), and SIGNATURE = SHA256 of a fixed 7-field ordered concatenation ending in TEST_MODE + IPN_TYPE_NAME using a separate VALIDATION_KEY), the event names, and production best practices. Not the unrelated PayPro B.V. / paypro.nl.
- [Guide to Praxis Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-praxis-webhooks-features-and-best-practices.md): Comprehensive guide to Praxis (Praxis Tech / Cashier payment orchestration) webhooks: verifying the gt-authentication header (SHA-384 hash, not HMAC and not SHA256, over per-webhook-type ordered field values concatenated with the merchant secret), the different field order per notification type, signing your ACK with external-request-signature, and production best practices.
- [Guide to Quoter Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-quoter-webhooks-features-and-best-practices.md): Comprehensive guide to Quoter webhooks: form-urlencoded POSTs with hash, timestamp, and data fields; weak verification via md5(HASH_KEY + timestamp + data) compared to the hash form field (the hash key is optional, so webhooks can run unverified); object-type triggers (Quote, Person, Payment) on create/update rather than dotted event names; and production best practices.
- [Guide to Smile API Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-smile-webhooks-features-and-best-practices.md): Comprehensive guide to Smile API (getsmileapi.com, the Southeast Asia employment/income data aggregator, not Smile.io or Smile Identity) webhooks: UPPER_SNAKE_CASE events, verifying the Smile-Signature header (HMAC-SHA512 hex over the entire raw body with the per-endpoint secret), at-least-once delivery and dedupe, and production best practices.
- [Guide to Zift Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-zift-webhooks-features-and-best-practices.md): Comprehensive guide to Zift webhooks (notifications): no signature or HMAC verification is documented (HTTPS and URL secrecy only), acknowledgement requires echoing {"notificationId": <id>}, retries at +5m/+15m/+60m/+24h then Failed, and the trigger names use tildes (subscription~create) while payload eventCode uses dots (billing.subscription-created). Includes production best practices.
- [Guide to AiPrise Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-aiprise-webhooks-features-and-best-practices.md): Comprehensive guide to AiPrise (KYB/KYC) callbacks: verifying the X-HMAC-SIGNATURE header (HMAC-SHA256, lowercase hex, over the raw body keyed with your AiPrise API private key directly, no separate secret), the verification_result outcome (APPROVED/DECLINED/REVIEW/UNKNOWN), correlation via verification_session_id, and production best practices.
- [Guide to Bridge API Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-bridge-api-webhooks-features-and-best-practices.md): Comprehensive guide to Bridge API (bridgeapi.io, Bankin open banking) webhooks: resource.action events like item.refreshed, verifying the BridgeApi-Signature header (v1= UPPERCASE hex HMAC-SHA256 over the raw body, per-webhook secret, extracting only v1 to prevent downgrade), 24h dual-secret rotation, fixed source IPs, and production best practices.
- [Guide to Bunny Stream Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-bunny-stream-webhooks-features-and-best-practices.md): Comprehensive guide to Bunny Stream webhooks: the thin VideoGuid/Status payload and Status enum (3=Finished, 5=Failed), verifying the X-BunnyStream-Signature header (HMAC-SHA256 over the raw body keyed with the library's Read-Only API key, lowercase hex), and production best practices.
- [Guide to Favro Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-favro-webhooks-features-and-best-practices.md): Comprehensive guide to Favro webhooks: card and comment action events, verifying the X-Favro-Webhook header (base64 HMAC-SHA1 over payloadId + webhookUrl, not the raw body), the ping event on creation, partial data from UI-automation webhooks, and production best practices.
- [Guide to Ethoca Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-ethoca-webhooks-features-and-best-practices.md): Comprehensive guide to Ethoca (Mastercard) Alerts Push webhooks: the mutual-TLS trust model (there is NO per-message HMAC/signature on Push alerts), fraud and dispute alert categories, why it differs from Ethoca Consumer Clarity's HMAC header, manual endpoint registration, and production best practices.
- [Guide to NMI Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-nmi-webhooks-features-and-best-practices.md): Comprehensive guide to NMI (Network Merchants) webhooks: transaction.action.result events, verifying the Webhook-Signature header (t=nonce,s=sig HMAC-SHA256 over nonce.body, lowercase hex, keyed with the signing key) where t is a NONCE not a timestamp, and production best practices.
- [Guide to Green Dot Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-greendot-webhooks-features-and-best-practices.md): Comprehensive guide to Green Dot Embedded Finance webhooks: the push-authentication model (OAuth client_credentials scope post:webhook or mTLS, no single HMAC), the optional undocumented x-gd-signature, the static API-Key header (not a signature), echoing x-GD-RequestId and responding with responseDetails JSON, eventType values, and production best practices.
- [Guide to Paymob Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-paymob-webhooks-features-and-best-practices.md): Comprehensive guide to Paymob transaction callbacks: verifying the hmac query parameter (HMAC-SHA512 over a specific ordered concatenation of selected payload fields, hex, keyed with the dashboard HMAC secret), the two callback types (processed POST vs response GET), reading state from boolean fields, and production best practices.
- [Guide to Synctera Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-synctera-webhooks-features-and-best-practices.md): Comprehensive guide to Synctera webhooks: resource.action events with wildcard subscriptions, verifying the Synctera-Signature header (HMAC-SHA256 over Request-Timestamp.body, hex, keyed with a secret from POST /v0/webhook_secrets, not the API key), rolling secrets, the 5-minute replay window, and production best practices.
- [Guide to Token.io Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-tokenio-webhooks-features-and-best-practices.md): Comprehensive guide to Token.io webhooks: open-banking payment events like PAYMENT_STATUS_CHANGED, verifying the token-signature header (Ed25519 asymmetric signature, base64url) with the member's public key over the exact raw body, the token-event header, retry behavior, and production best practices.
- [Guide to TikTok Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-tiktok-webhooks-features-and-best-practices.md): Comprehensive guide to TikTok for Developers webhooks (Login Kit / Content Posting / Data Portability, not TikTok Shop): the four events (authorization.removed, video.upload.failed, video.publish.completed, portability.download.ready), verifying the TikTok-Signature header (t=ts,s=sig HMAC-SHA256 hex over timestamp + '.' + raw body keyed with client_secret), and production best practices.
- [Guide to Upollo Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-upollo-webhooks-features-and-best-practices.md): Comprehensive guide to Upollo webhooks: fired on a risk flag (account sharing, multi-accounting) rather than a discrete event, verifying the Upollo-Signature header (t:timestamp,s0:hash where s0 is HMAC-SHA512 over the raw body with the webhook secret), the analysis payload, and production best practices.
- [Guide to Utila Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-utila-webhooks-features-and-best-practices.md): Comprehensive guide to Utila webhooks: transaction and wallet events, verifying the x-utila-signature header (RSA-4096 + SHA-512 + PSS padding, base64) with Utila's public key over the raw body (no shared secret, no timestamp), thin payloads fetched via the API, and production best practices.
- [Guide to Airwallex Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-airwallex-webhooks-features-and-best-practices.md): Comprehensive guide to Airwallex webhooks: payment_intent, payment_attempt, refund, and payment_dispute events, verifying the x-signature (hex HMAC-SHA256 over x-timestamp + raw body with the per-endpoint secret), replay checks, and production best practices.
- [Guide to Akeneo Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-akeneo-webhooks-features-and-best-practices.md): Comprehensive guide to Akeneo PIM Events API webhooks: product and product_model events batched in an events[] array, verifying the x-akeneo-request-signature (hex HMAC-SHA256 over timestamp.body with the connection secret) with a 5-minute freshness check, the sub-500ms ack requirement and no-retry delivery, and production best practices.
- [Guide to Alipay Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-alipay-webhooks-features-and-best-practices.md): Comprehensive guide to Alipay async notifications: the modern Antom / Alipay+ header RSA scheme (SHA256withRSA over 'POST path\nclient-id.request-time.body', verified with Alipay's public key), how the legacy openapi/MAPI form-param RSA2 scheme differs, notifyPayment/notifyRefund method names, and production best practices.
- [Guide to Ashby Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-ashby-webhooks-features-and-best-practices.md): Comprehensive guide to Ashby webhooks: camelCase application, candidate, and interview events in an {action, data} envelope, verifying the Ashby-Signature header (sha256=<hex> HMAC-SHA256 over the raw body with the per-webhook secret), the ping event, auto-disable on >=400, event fan-out, and production best practices.
- [Guide to Bridge Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-bridge-webhooks-features-and-best-practices.md): Comprehensive guide to Bridge (bridge.xyz) webhooks: category-based customer, KYC, and transfer events, verifying the X-Webhook-Signature (t=ms,v0=base64 RSA-SHA256 over SHA256 of timestamp.rawBody, using a per-webhook PEM public key), the ~10-minute freshness window, disabled-by-default endpoints, and production best practices.
- [Guide to Clio Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-clio-webhooks-features-and-best-practices.md): Comprehensive guide to Clio Manage webhooks: the split model + events subscription design (matter.created, contact.updated), verifying the X-Hook-Signature (lowercase-hex HMAC-SHA256 over the raw body with the shared_secret you supply), the mandatory regional hosts (US/EU/CA/AU; a wrong-region call returns invalid_client), the may-auto-enable behavior, the 3-day default expiry renewed via expires_at, and production best practices.
- [Guide to Courier Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-courier-webhooks-features-and-best-practices.md): Comprehensive guide to Courier outbound webhooks: colon-format events including the single message:updated event (not per-status), verifying the courier-signature (t=timestamp,signature=hex HMAC-SHA256 over timestamp.JSON.stringify(body)), and production best practices.
- [Guide to Enode Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-enode-webhooks-features-and-best-practices.md): Comprehensive guide to Enode webhooks: colon-delimited events for vehicles, chargers, and batteries, verifying the x-enode-signature header (sha1=hex HMAC-SHA1, not SHA256, over the raw body with a caller-supplied secret), retry and inactivation behavior, and production best practices.
- [Guide to Exact Online Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-exact-online-webhooks-features-and-best-practices.md): Comprehensive guide to Exact Online webhooks: division-scoped topic subscriptions, verifying the HashCode field inside the JSON body (HMAC-SHA256 over the raw Content object JSON keyed with the app webhook secret, uppercase hex, no signature header), handling the empty content-length-0 validation POST sent on creation, the thin Content payload (Topic, Action, Key, Division, ClientId, ExactOnlineEndpoint, EventCreatedOn), fetching via the ready-made ExactOnlineEndpoint URL under a ~600s OAuth token, and production best practices.
- [Guide to FastSpring Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-fastspring-webhooks-features-and-best-practices.md): Comprehensive guide to FastSpring webhooks: order and subscription events delivered in a batched events[] array, verifying the X-FS-Signature (base64 HMAC-SHA256 over the raw body with the per-webhook HMAC secret), deduplication on event id, and production best practices.
- [Guide to Flexport Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-flexport-webhooks-features-and-best-practices.md): Comprehensive guide to Flexport freight webhooks: milestone events in /object#event format, verifying the X-Hub-Signature (SHA1, deprecating) and X-Hub-Signature-256 (SHA256, recommended) headers as hex digests over the raw body with a per-endpoint secret token, and production best practices.
- [Guide to Fireflies Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-fireflies-webhooks-features-and-best-practices.md): Comprehensive guide to Fireflies webhooks (V2): meeting.transcribed and related events, verifying the X-Hub-Signature header (sha256= prefix, lowercase-hex HMAC-SHA256 over the raw body with the configured secret), optional signing (no secret means no signature header), deduplication on x-webhook-delivery-id, and production best practices.
- [Guide to Lithic Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-lithic-webhooks-features-and-best-practices.md): Comprehensive guide to Lithic webhooks (Svix-powered, Standard Webhooks): card, transaction, and dispute events, verifying webhook-id/webhook-timestamp/webhook-signature (HMAC-SHA256 over id.timestamp.body with the base64-decoded whsec_ secret, 5-minute tolerance), the SDK webhooks.unwrap helper, auto-disable, and production best practices.
- [Guide to Cisco Meraki Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-meraki-webhooks-features-and-best-practices.md): Comprehensive guide to Cisco Meraki webhook alerts: alertType/alertTypeId events, verification via the plaintext sharedSecret field inside the JSON body (not a header), TLS as the transport protection, Liquid payload templates, auto-disable behavior, and production best practices.
- [Guide to Microsoft SharePoint Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-microsoft-sharepoint-webhooks-features-and-best-practices.md): Comprehensive guide to Microsoft SharePoint list webhooks: the validationtoken echo handshake, optional clientState (there is no signature), thin batched notifications that carry no change detail (call GetChanges with a stored change token), the 180-day subscription expiry and renewal, and production best practices.
- [Guide to Nuvemshop Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-nuvemshop-webhooks-features-and-best-practices.md): Comprehensive guide to Nuvemshop (Tiendanube) webhooks: resource/action events like order/created and order/paid, verifying the x-linkedstore-hmac-sha256 header (hex HMAC-SHA256 over the raw body keyed with the app client secret), thin payloads, the retry ladder, and production best practices.
- [Guide to Oura Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-oura-webhooks-features-and-best-practices.md): Comprehensive guide to Oura webhooks: sleep, activity, and readiness events, the GET subscription handshake (verification_token + challenge echo), verifying x-oura-signature (uppercase-hex HMAC-SHA256 over timestamp + JSON.stringify(body) keyed with the client secret), thin payloads, subscription renewal, and production best practices.
- [Guide to Pylon Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-pylon-webhooks-features-and-best-practices.md): Comprehensive guide to Pylon webhooks: issue and account events, verifying the Pylon-Webhook-Signature header (hs256=hex HMAC-SHA256 over timestamp.payload with the destination signing secret), the older X-Pylon-Signature scheme, retry and inactivation behavior, and production best practices.
- [Guide to Retell AI Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-retell-webhooks-features-and-best-practices.md): Comprehensive guide to Retell AI webhooks: call_started/call_ended/call_analyzed events, verifying the X-Retell-Signature (v=timestamp,d=hex HMAC-SHA256 over raw_body + timestamp keyed with your Retell API key), the SDK verify helper, the ~5-minute replay window, retries, and production best practices.
- [Guide to RingCentral Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-ringcentral-webhooks-features-and-best-practices.md): Comprehensive guide to RingCentral webhooks: event-filter subscriptions, the mandatory Validation-Token echo handshake, the optional developer-set Verification-Token header (there is no HMAC signature), subscription expiry and renewal (now up to ~20 years), blacklisting on failed health checks, and production best practices.
- [Guide to ShipHero Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-shiphero-webhooks-features-and-best-practices.md): Comprehensive guide to ShipHero webhooks: Title Case webhook types like Order Allocated and Shipment Update, verifying the x-shiphero-hmac-sha256 header (base64 HMAC-SHA256 over the raw body with the app shared_signature_secret), GraphQL registration, event loss while disabled, and production best practices.
- [Guide to ShipBob Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-shipbob-webhooks-features-and-best-practices.md): Comprehensive guide to ShipBob webhooks: order and shipment topics, verifying the webhook-id/webhook-timestamp/webhook-signature headers (HMAC-SHA256 over id.timestamp.body with the base64-decoded whsec_ secret, Standard Webhooks/Svix format), the retry ladder, auto-disable, and production best practices.
- [Guide to SHOPLINE Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-shopline-webhooks-features-and-best-practices.md): Comprehensive guide to SHOPLINE Open Platform webhooks: Shopify-style slash-format topics, verifying the X-Shopline-Hmac-Sha256 header (lowercase-hex HMAC-SHA256 of the raw body with the app secret), the required api_version field on webhook creation, the retry ladder and auto-removal, and production best practices.
- [Guide to Solidgate Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-solidgate-webhooks-features-and-best-practices.md): Comprehensive guide to Solidgate webhooks: order, chargeback, and subscription events, verifying the signature (base64 of the hex string of HMAC-SHA512(secretKey, publicKey + rawBody + publicKey)) with the merchant + signature headers, the retry schedule, and production best practices.
- [Guide to Tebex Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-tebex-webhooks-features-and-best-practices.md): Comprehensive guide to Tebex webhooks: payment and recurring-payment events, verifying the two-step X-Signature (hex HMAC-SHA256 of the sha256 hash of the raw body, keyed with the webhook secret), the validation.webhook setup ping answered with the webhook id, the source IP allowlist, and production best practices.
- [Guide to Treezor Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-treezor-webhooks-features-and-best-practices.md): Comprehensive guide to Treezor webhooks: object.action events for a BaaS event surface, verifying the object_payload_signature field inside the JSON body (base64 HMAC-SHA256 over the object_payload with a JSON-flatten + unicode-escape prep, keyed with the webhook secret), subscription on a separate host, retries, and production best practices.
- [Guide to USPS Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-usps-webhooks-features-and-best-practices.md): Comprehensive guide to USPS Subscriptions-Tracking webhooks: subscription-based tracking notifications, the OPTIONAL verification (X-HMAC Base64(HMAC-SHA256(secret, timestamp + payload)) or IP allowlist, nothing if unconfigured), the stringified payload field, SUSPENDED/auto-delete behavior, and production best practices.
- [Guide to Walmart Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-walmart-webhooks-features-and-best-practices.md): Comprehensive guide to Walmart Marketplace webhooks: general event notifications (authMethod BASIC_AUTH / HMAC-with-clientSecret / OAUTH that Walmart uses to authenticate to your endpoint) and performance webhooks (WM_SEC.SIGNATURE base64 HMAC-SHA256 over a canonical METHOD/PATH/TIMESTAMP/SHA256(body) string), why it is not the RSA seller-outbound scheme, and production best practices.
- [Guide to WeChat Pay Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-wechat-pay-webhooks-features-and-best-practices.md): Comprehensive guide to WeChat Pay APIv3 notifications: verifying the SHA256withRSA signature over timestamp\nnonce\nbody\n with the platform public certificate (matched by Wechatpay-Serial), decrypting the AES-256-GCM resource.ciphertext with the APIv3 key, certificate rotation, and production best practices.
- [Guide to Zero Hash Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-zerohash-webhooks-features-and-best-practices.md): Comprehensive guide to Zero Hash webhooks: trade and payment status events, verifying the x-zh-hook-signature (hex HMAC-SHA256 over payload+timestamp with your provisioned secret) or the RSA variant, the 5-minute replay window, how it differs from Zero Hash's REST API auth, and production best practices.
- [Guide to Alchemy Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-alchemy-webhooks-features-and-best-practices.md): Comprehensive guide to Alchemy Notify webhooks: address activity, mined/dropped transaction, NFT activity, and custom GraphQL webhook types; verifying the X-Alchemy-Signature (HMAC-SHA256 hex over the raw body with the per-webhook signing key), IP allowlisting, retry backoff, and production best practices.
- [Guide to Circle Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-circle-webhooks-features-and-best-practices.md): Comprehensive guide to Circle Payments Network (CPN) webhooks: cpn.* payment and transaction events, verifying the ECDSA (ECDSA_SHA_256) signature with X-Circle-Signature + X-Circle-Key-Id and a public key fetched from the CPN publicKey endpoint over the raw body, the v2 HEAD endpoint validation, IP allowlisting, and production best practices.
- [Guide to Commerce Layer Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-commercelayer-webhooks-features-and-best-practices.md): Comprehensive guide to Commerce Layer webhooks: {resource}.{trigger} topics like orders.place, verifying the X-CommerceLayer-Signature (base64 HMAC-SHA256 over the raw body with the webhook's shared_secret), testing webhooks locally with the Hookdeck CLI, the JSON:API payload, the circuit breaker (10 retries, disable after 30 consecutive failures), and production best practices.
- [Guide to eBay Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-ebay-webhooks-features-and-best-practices.md): Comprehensive guide to eBay Notification API webhooks: the endpoint-creation challenge (SHA-256 of challengeCode + verificationToken + endpoint in that exact order), verifying the ECDSA message signature via x-ebay-signature and the getPublicKey endpoint over the raw body, the event-notification-nodejs-sdk, and production best practices.
- [Guide to Front Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-front-webhooks-features-and-best-practices.md): Comprehensive guide to Front application webhooks: conversation and message events, verifying the X-Front-Signature (base64 HMAC-SHA256 over timestamp + ':' + raw body keyed with the app signing key), the X-Front-Challenge handshake, how the legacy rule webhooks differ (HMAC-SHA1 over the body keyed with the API Secret), and production best practices.
- [Guide to Pipedrive Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-pipedrive-webhooks-features-and-best-practices.md): Comprehensive guide to Pipedrive webhooks: action.entity events (create.deal, change.person, delete.activity), the HTTP Basic Auth security model (no HMAC or request signing), the meta/data/previous payload, retry at 3/30/150s with a ban system and 3-day auto-delete, and production best practices.
- [Guide to Neon Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-neon-webhooks-features-and-best-practices.md): Comprehensive guide to Neon Auth native webhooks: user and auth events, verifying the Ed25519 detached JWS (X-Neon-Signature, X-Neon-Signature-Kid, X-Neon-Timestamp) against the JWKS public key with no shared secret, the double-base64url signing input, the 5-minute replay window, and production best practices.
- [Guide to Smartcar Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-smartcar-webhooks-features-and-best-practices.md): Comprehensive guide to Smartcar webhooks: VEHICLE_STATE and VEHICLE_ERROR events, verifying the SC-Signature (hex HMAC-SHA256 over the raw body keyed with the Application Management Token), the VERIFY challenge handshake (HMAC of the challenge within 15s), the SDK verifyPayload/hashChallenge helpers, and production best practices.
- [Guide to Statsig Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-statsig-webhooks-features-and-best-practices.md): Comprehensive guide to Statsig Event Webhooks: the required url_verification handshake (echo the verification_code back with a 200 or the webhook never registers), config-change and exposure events, verifying the X-Statsig-Signature with the v0:{timestamp}:{body} basestring HMAC-SHA256 hex prefixed v0=, batched array payloads, and production best practices.
- [Guide to Strava Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-strava-webhooks-features-and-best-practices.md): Comprehensive guide to Strava webhooks: the push subscription model with a GET validation handshake (hub.mode, hub.challenge, hub.verify_token echoed as JSON within 2 seconds), no per-event cryptographic signature, thin payloads (object_id only) fetched via the API, one subscription per application, and production best practices.
- [Guide to Tally Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-tally-webhooks-features-and-best-practices.md): Comprehensive guide to Tally webhooks: the FORM_RESPONSE event, verifying the OPTIONAL Tally-Signature (base64 HMAC-SHA256 over the payload with the per-webhook signing secret) and handling the unsigned case, the retry ladder, that webhooks are free on all plans, and production best practices.
- [Guide to Telnyx Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-telnyx-webhooks-features-and-best-practices.md): Comprehensive guide to Telnyx v2 webhooks: messaging and voice events, verifying the Ed25519 public-key signature (telnyx-signature-ed25519 + telnyx-timestamp over {timestamp}|{raw body} with the account public key), the SDK constructEvent/construct_event helpers, the 5-minute replay tolerance, failover URLs, and production best practices.
- [Guide to Uber Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-uber-webhooks-features-and-best-practices.md): Comprehensive guide to Uber Eats webhooks: order and store event notifications, verifying the X-Uber-Signature (lowercase hex HMAC-SHA256 over the raw body keyed with the client secret), retry behavior, the empty-200 acknowledgement, how Uber Direct's per-webhook Signing Key differs, and production best practices.
- [Guide to Wix Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-wix-webhooks-features-and-best-practices.md): Comprehensive guide to Wix webhooks: the entire request body is an RS256 JWT signed by Wix and verified with your app's public key (no global JWKS), event-name encodings (wix.ecom.v1.order_* FQDN form), the @wix/sdk process helper, out-of-order and duplicate delivery, and production best practices.
- [Guide to Xero Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-xero-webhooks-features-and-best-practices.md): Comprehensive guide to Xero webhooks: thin event payloads for CONTACT, INVOICE, CREDITNOTE, and SUBSCRIPTION categories, verifying the x-xero-signature (HMAC-SHA256 over the raw body, base64, constant-time), the Intent to Receive 200/401 activation handshake, fetching the resource via resourceUrl, and production best practices.
- [Guide to Airtable Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-airtable-webhooks-features-and-best-practices.md): Comprehensive guide to Airtable webhooks: the thin notification ping (base.id, webhook.id, timestamp), fetching changes via the list-payloads cursor API, X-Airtable-Content-MAC verification (hmac-sha256= + hex HMAC-SHA256 keyed with the base64-decoded macSecretBase64 over the raw body), the 7-day PAT/OAuth expiry, and production best practices.
- [Guide to Asana Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-asana-webhooks-features-and-best-practices.md): Comprehensive guide to Asana webhooks: the X-Hook-Secret handshake at creation, X-Hook-Signature HMAC-SHA256 hex verification over the raw body, compact event batches, 8-hour heartbeats, 24-hour deletion on missed delivery, filters required for workspace/team resources, and production best practices.
- [Guide to Attentive Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-attentive-webhooks-features-and-best-practices.md): Comprehensive guide to Attentive webhooks: SMS and email subscriber events, x-attentive-hmac-sha256 hex HMAC-SHA256 verification over the raw body with the per-webhook signing key, no timestamp (so no built-in replay protection), retries with exponential backoff for up to 3 days, auto-disable, and production best practices.
- [Guide to AWS SNS Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-aws-sns-webhooks-features-and-best-practices.md): Comprehensive guide to consuming AWS SNS notifications over HTTP/S: the SubscriptionConfirmation handshake, RSA signature verification (byte-sorted Key\nValue\n string, cert from an sns.*.amazonaws.com SigningCertURL, SignatureVersion 1 = SHA1 / 2 = SHA256), raw message delivery which strips the signature, retry policy, and production best practices.
- [Guide to Customer.io Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-customerio-webhooks-features-and-best-practices.md): Comprehensive guide to Customer.io Reporting Webhooks: the object_type + metric event model (no dotted event names), X-CIO-Signature verification with the v0:timestamp:body scheme HMAC-SHA256 hex, the 4-second acknowledgement window with 7-day retries and backlog ordering, and production best practices.
- [Guide to DocuSign Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-docusign-webhooks-features-and-best-practices.md): Comprehensive guide to DocuSign Connect webhooks: envelope and recipient events via JSON SIM (deliveryMode SIM, eventData restv2.1), X-DocuSign-Signature-1..N base64 HMAC-SHA256 verification over the raw body with up to 100 keys (only one must match), exponential-backoff retries up to 15 days, and production best practices.
- [Guide to Facebook Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-facebook-webhooks-features-and-best-practices.md): Comprehensive guide to Facebook Graph API webhooks: object+field event subscriptions, the hub.challenge GET verification handshake, X-Hub-Signature-256 HMAC-SHA256 verification over the raw body with the App Secret, batched payloads, 36-hour retry behavior, and production best practices.
- [Guide to Fireblocks Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-fireblocks-webhooks-features-and-best-practices.md): Comprehensive guide to Fireblocks webhooks: the v2 detached-JWS (RS512) signature verified via regional JWKS endpoints, the legacy v1 RSA-SHA512 scheme whose dual-send window ended March 20 2026, event subscriptions, resend up to 30 days, exponential-backoff retries, and production best practices.
- [Guide to Microsoft Graph Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-microsoft-graph-webhooks-features-and-best-practices.md): Comprehensive guide to Microsoft Graph change notifications delivered via webhooks: the validationToken endpoint-validation handshake (10-second echo), clientState verification, rich-notification JWT validation, subscription creation and renewal, the 3-second delivery acknowledgement window with 4-hour retries, throttling, and production best practices.
- [Guide to Paystack Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-paystack-webhooks-features-and-best-practices.md): Comprehensive guide to Paystack webhooks: charge, transfer, and subscription events; verifying the x-paystack-signature with HMAC-SHA512 (not SHA256) of the raw body keyed with the secret key; the source IP allowlist; separate test/live configuration; retry schedule; and production best practices.
- [Guide to Nylas Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-nylas-webhooks-features-and-best-practices.md): Comprehensive guide to Nylas v3 webhooks: CloudEvents notifications, the challenge handshake, x-nylas-signature hex HMAC-SHA256 verification over the raw body with the webhook_secret, the gzip compressed-bytes gotcha, retries on temporary errors, failing/failed webhook states, and production best practices.
- [Guide to Persona Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-persona-webhooks-features-and-best-practices.md): Comprehensive guide to Persona webhooks: inquiry and verification events in JSON:API envelopes, verifying the Persona-Signature (t=<ts>,v1=<hex> HMAC-SHA256 over t.rawBody keyed with the wbhsec_ secret), accepting multiple pairs during rotation, no documented timestamp tolerance, retries with exponential backoff, 30-day redelivery, and production best practices.
- [Guide to Picqer Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-picqer-webhooks-features-and-best-practices.md): Comprehensive guide to Picqer webhooks: order and picklist event subscriptions, X-Picqer-Signature base64 HMAC-SHA256 verification over the raw body with the optional per-hook secret, the 10-second response requirement, 15 retries over ~17 hours, auto-deactivation after 5 failures in 24 hours, and production best practices.
- [Guide to Recharge Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-recharge-webhooks-features-and-best-practices.md): Comprehensive guide to Recharge webhooks: subscription, charge, and order topics; validating X-Recharge-Hmac-Sha256, which is a plain SHA-256 of the client secret concatenated with the raw body (secret first), not an HMAC; the charge/paid topic (charge/success does not exist); 5-second timeout; 20 retries over 48 hours then deletion; and production best practices.
- [Guide to Revolut Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-revolut-webhooks-features-and-best-practices.md): Comprehensive guide to Revolut Merchant webhooks: order events, verifying the Revolut-Signature (v1=<hex> HMAC-SHA256 over v1.{Revolut-Request-Timestamp}.{raw body} keyed with the wsk_ signing secret), the 5-minute timestamp tolerance with millisecond timestamps, multiple signatures during rotation, retry behavior, and production best practices.
- [Guide to Sanity Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-sanity-webhooks-features-and-best-practices.md): Comprehensive guide to Sanity GROQ-powered webhooks: create/update/delete triggers with GROQ filters and projections, the sanity-webhook-signature scheme (HMAC-SHA256 over timestamp.body, base64url) verified with the @sanity/webhook helper, single-concurrency delivery with two retries, the idempotency-key header, and production best practices.
- [Guide to ShipStation Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-shipstation-webhooks-features-and-best-practices.md): Comprehensive guide to ShipStation V1 webhooks: the thin resource_url + resource_type payload, fetching data with Basic auth under the 40 req/min V1 rate limit, the six V1 events, the absence of signature verification (URL secrecy plus authed resource_url is the trust model), and a note on the ShipEngine-based V2 RSA signatures. Production best practices included.
- [Guide to Svix Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-svix-webhooks-features-and-best-practices.md): Comprehensive guide to receiving webhooks delivered through Svix: the svix-id, svix-timestamp, and svix-signature headers, HMAC-SHA256 over id.timestamp.body with the base64-decoded whsec_ secret, multiple v1 signatures for rotation, 5-minute timestamp tolerance, the webhook-* header aliases, and production best practices.
- [Guide to TikTok Shop Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-tiktok-shop-webhooks-features-and-best-practices.md): Comprehensive guide to TikTok Shop webhooks: order, package, and product event subscriptions, signature verification via the Authorization header (lowercase-hex HMAC-SHA256 over app_key + raw body keyed with app_secret), the 3-second empty-200 requirement, at-least-once delivery with four retries, deduplication on tts_notification_id, and production best practices.
- [Guide to Trello Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-trello-webhooks-features-and-best-practices.md): Comprehensive guide to Trello webhooks: board and card action events, the x-trello-webhook signature which is base64 HMAC-SHA1 over the raw body concatenated with the callbackURL keyed with the OAuth application secret, the HEAD request at creation, retry behavior, auto-disable, and production best practices.
- [Guide to Twitch Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-twitch-webhooks-features-and-best-practices.md): Comprehensive guide to Twitch EventSub webhooks: subscription types like stream.online and channel.follow (v2), the three message types (notification, webhook_callback_verification, revocation), signature verification (sha256= HMAC-SHA256 over message id + timestamp + raw body), the 10-minute replay window, the subscription cost model, and production best practices.
- [Guide to X (Twitter) Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-twitter-webhooks-features-and-best-practices.md): Comprehensive guide to X (Twitter) Account Activity webhooks delivered via the V2 Webhooks API: activity event types, the Challenge-Response Check (CRC) handshake, HMAC-SHA256 signature verification with the consumer secret and the x-twitter-webhooks-signature header, undocumented retry behavior, and best practices for production.
- [Guide to Vercel Log Drains: Features and Best Practices](/webhooks/platforms/guide-to-vercel-log-drains-webhooks-features-and-best-practices.md): Comprehensive guide to Vercel Log Drains: batched HTTP log delivery as JSON or NDJSON, the x-vercel-signature HMAC-SHA1 hex verification over the raw body with the drain secret, the x-vercel-verify handshake, log sources and environments, errored-drain thresholds, and production best practices.
- [Hangfire Alternatives for Webhook Retries: Hookdeck Event Gateway, MassTransit, Azure Service Bus, and Convoy Compared](/webhooks/platforms/hangfire-alternatives-for-webhook-retries.md): In-depth comparison of Hangfire alternatives for webhook retries in .NET applications, analyzing Hookdeck Event Gateway, MassTransit, NServiceBus, Azure Service Bus, Amazon SQS, and Convoy across webhook-aware semantics, failed-payload visibility, per-source retry policies, replay, and operational footprint.
- [Oban Alternatives for Webhook Retries: Hookdeck Event Gateway, Broadway, Cloud Queues, and Convoy Compared](/webhooks/platforms/oban-alternatives-for-webhook-retries.md): In-depth comparison of Oban alternatives for webhook retries in Elixir and Phoenix applications, analyzing Hookdeck Event Gateway, Broadway, Amazon SQS, Google Cloud Tasks, and Convoy across webhook-aware semantics, failed-payload visibility, per-source retry policies, replay, and operational footprint.
- [Laravel Queue Alternatives for Webhook Retries: Hookdeck Event Gateway, Database Driver, Amazon SQS, and Convoy Compared](/webhooks/platforms/laravel-queue-alternatives-for-webhook-retries.md): In-depth comparison of Laravel queue alternatives for webhook retries, analyzing Hookdeck Event Gateway, Laravel's database driver and Laravel Cloud, Amazon SQS, and Convoy across webhook-aware semantics, failed-payload visibility, per-source retry policies, replay, and operational footprint.
- [AWS SQS Alternatives for Webhooks: Hookdeck Event Gateway, Convoy, and Cloud Queues Compared](/webhooks/platforms/aws-sqs-alternatives-for-webhooks.md): In-depth comparison of AWS SQS alternatives for webhook ingestion and retries, analyzing Hookdeck Event Gateway, Convoy, Google Pub/Sub, RabbitMQ, and Postgres-backed queues across signature verification, per-source retry policies, dead-letter handling, replay, observability, and operational cost.
- [BullMQ Alternatives for Webhook Retries: Hookdeck Event Gateway, pg-boss, Cloud Queues, and Convoy Compared](/webhooks/platforms/bullmq-alternatives-for-webhook-retries.md): In-depth comparison of BullMQ alternatives for webhook retries in Node.js applications, analyzing Hookdeck Event Gateway, pg-boss, Bee-Queue, AWS SQS, Google Cloud Tasks, and Convoy across signature verification, per-source retry policies, failed-payload visibility, serverless fit, replay, and operational cost.
- [Inngest Alternatives: Hookdeck Event Gateway, Trigger.dev, Temporal, and Restate Compared](/webhooks/platforms/inngest-alternatives.md): In-depth comparison of Inngest alternatives across two layers — webhook ingestion and durable execution, analyzing Hookdeck Event Gateway, Trigger.dev, Temporal, and Restate on signature verification, durable step execution, language and SDK fit, self-hostability, pricing, and observability.
- [RequestBin Alternatives for Testing Webhooks: Hookdeck Console, webhook.site, Beeceptor, and Pipedream Compared](/webhooks/platforms/requestbin-alternatives.md): In-depth comparison of RequestBin alternatives for testing and inspecting webhooks, analyzing Hookdeck Console, webhook.site, Beeceptor, Pipedream, and ngrok's request inspector across inspection depth, persistence, replay-to-localhost, provider sample libraries, team workflows, and the path to production.
- [Sidekiq Alternatives for Webhook Retries: Hookdeck Event Gateway, Solid Queue, GoodJob, and Cloud Queues Compared](/webhooks/platforms/sidekiq-alternatives-for-webhook-retries.md): In-depth comparison of Sidekiq alternatives for webhook retries in Rails applications, analyzing Hookdeck Event Gateway, Solid Queue, GoodJob, AWS SQS, and Convoy across signature verification, per-source retry policies, failed-payload visibility, replay, and operational footprint.
- [Shopify Next Generation Events: What's Changing and How to Migrate](/webhooks/platforms/shopify-next-generation-events-migration-guide.md): Migration guide for Shopify Next Generation Events (Developer Preview, unstable API, Product and Customer topics only): TOML event subscriptions with field-level triggers, custom Admin GraphQL query payloads, query filters, and a fields_changed array; side-by-side comparison with classic Admin API webhook subscriptions; a six-step migration playbook (audit, rank by noise, translate, dual-run, update idempotency/HMAC, handle the download-envelope shape); plus receiving events with Hookdeck for observability, filtering, routing, local development, and replay.
- [Migrating from a RabbitMQ-backed webhook pipeline to Hookdeck](/webhooks/platforms/rabbitmq-to-hookdeck-migration.md): Five-step phased migration plan from a RabbitMQ-backed webhook pipeline to Hookdeck Event Gateway: shadow ingest, mirror to production, flip the source, repeat per source in increasing order of stakes, and decommission. Covers what to keep versus replace, per-step rollback paths, and the common mistakes teams make.
- [What RabbitMQ doesn't give you for webhooks (and what you'll end up building)](/webhooks/platforms/rabbitmq-webhook-shortcomings.md): Walkthrough of the webhook-specific work RabbitMQ does not cover: the HTTP ingestion tier, per-source signature verification, source-aware retries, idempotency, lifecycle observability, replay and backfill, and transformation. Explains why the queue is roughly 20% of a webhook system and what a managed webhook gateway bundles around it.
- [Migrating Redis-backed webhook handling to Hookdeck Event Gateway](/webhooks/platforms/redis-to-hookdeck-migration.md): Phased migration plan from Redis-backed webhook handling (BullMQ, Sidekiq, RQ, Celery, Redis Streams, or hand-rolled LPUSH/BRPOP) to Hookdeck Event Gateway. Covers the three starting shapes, what to keep versus replace, a five-phase rollout with per-phase rollback, and the mistakes teams make.
- [Why Redis is a great cache, but a bad webhook queue](/webhooks/platforms/redis-webhook-queue-teardown.md): Technical teardown of Redis-backed webhook ingestion. Examines the LPUSH/BRPOP job-queue pattern, Redis Streams, and Pub/Sub against the realities of webhook traffic (durability modes, memory eviction, asynchronous replication loss) and argues that the webhook edge needs a layer Redis was never built to be.
- [Building AI code review with GitHub and Claude](/webhooks/platforms/building-ai-code-review-with-github-and-claude.md): Tutorial: GitHub pull_request webhooks via Hookdeck to a Claude code review handler with filters (skip drafts, bots, oversized PRs), rate limiting, retries, and replay; reviews fan back to GitHub as inline comments via a second Hookdeck connection.
- [Building AI email triage with Mailgun and Claude](/webhooks/platforms/building-ai-email-triage-with-mailgun-and-claude.md): Tutorial: Mailgun inbound routes through Hookdeck to a Claude email triage handler with spam/auto-reply filters, payload normalisation (stripped-text), rate limiting, retries, and replay; results fan out to Zendesk tickets, Slack escalations, and metrics via a second Hookdeck connection.
- [Building AI ticket triage with Zendesk and Claude](/webhooks/platforms/building-ai-ticket-triage-with-zendesk-and-claude.md): Tutorial: Zendesk trigger webhooks through Hookdeck to a Claude triage handler with HTML stripping, channel filters, rate limiting, retries (handling 529 overloaded_error), and replay; ticket updates and draft replies fan back via a second Hookdeck connection to Zendesk, Slack, and product-team dashboards.
- [Building CRM enrichment with HubSpot and OpenAI](/webhooks/platforms/building-crm-enrichment-with-hubspot-and-openai.md): Tutorial: HubSpot contact.creation webhooks through Hookdeck to an OpenAI enrichment handler with batched-event normalisation, personal-email filtering, rate limiting, retries, and replay; enriched properties write back to HubSpot via a second Hookdeck connection that can also fan out to Slack and a data warehouse.
- [Building dispute response prep with Stripe and Claude](/webhooks/platforms/building-dispute-response-prep-with-stripe-and-claude.md): Tutorial: Stripe charge.dispute.* events through Hookdeck to a Claude evidence-mapping handler with idempotency keys (stripe_event_id), sequential delivery by dispute_id, long-tail retries (7-day max age), and replay; drafted responses fan back to Linear tickets, S3 evidence packages, and Slack via a second Hookdeck connection.
- [Building post-purchase AI follow-up with Shopify and Claude](/webhooks/platforms/building-post-purchase-ai-follow-up-with-shopify-and-claude.md): Tutorial: Shopify orders/paid webhooks through Hookdeck to a Claude follow-up handler with idempotency by order_id, burst-tolerant rate limits, retries, and replay; AI-generated thank-you emails, CRM tags, retargeting events, and scheduled check-ins fan out via a second Hookdeck connection.
- [Building real-estate lead calling with Google Forms and Bland AI](/webhooks/platforms/building-real-estate-lead-calling-with-google-forms-and-bland-ai.md): Tutorial: Google Forms (via Apps Script trigger) through Hookdeck to Bland AI POST /v1/calls with phone normalisation, filtering, rate limits and retries; Bland call-completion webhooks return through a second Hookdeck connection that fans summaries, transcripts, and booked appointments into CRM, Slack, and a recording archive.
- [Building sentiment-aware support replies with Intercom and OpenAI](/webhooks/platforms/building-sentiment-aware-support-replies-with-intercom-and-openai.md): Tutorial: Intercom conversation.user.created and .replied webhooks through Hookdeck to an OpenAI sentiment + draft-reply handler with enrichment, filters, rate limits (incident-spike-safe), retries, and replay; results fan back to Intercom (tags, notes), Slack (senior agent escalation), and a data warehouse via a second Hookdeck connection.
- [Building real-estate property lead handoff with Google Forms and AI agents](/webhooks/platforms/building-real-estate-property-lead-handoff-with-google-forms-and-ai-agents.md): Tutorial: Google Forms (via Apps Script trigger) through Hookdeck to an AI agent runtime (direct LLM handler or workflow engine), with property/email filters, payload normalisation, rate limits, and retries; agent outputs emit a single structured webhook that Hookdeck fans out to CRM, calendar, Slack, and email destinations.
- [Hookdeck Event Gateway vs Inngest: Webhook Gateway and Durable Runtime Compared](/webhooks/platforms/hookdeck-event-gateway-vs-inngest-webhook-gateway-and-durable-runtime-comparison.md): Feature-by-feature comparison of Hookdeck Event Gateway (a webhook gateway for ingress) and Inngest (a durable workflow runtime for execution). Covers pre-configured sources, signature verification, queueing, filtering, deduplication, routing, transformations, durable execution, per-step retries, waitpoints, replay, observability, developer tools, self-hostability, and pricing — plus when to use one, the other, or both.
- [Hookdeck Event Gateway vs Temporal: Webhook Gateway and Durable Workflow Orchestrator Compared](/webhooks/platforms/hookdeck-event-gateway-vs-temporal-webhook-gateway-and-durable-workflow-orchestrator-comparison.md): Feature-by-feature comparison of Hookdeck Event Gateway (a webhook gateway for ingress) and Temporal (a durable workflow orchestrator for execution). Covers pre-configured sources, signature verification, queueing, filtering, deduplication, routing, transformations, event-sourced durable workflows, per-activity retries, signals and timers, long-running workflows, replay, observability, SDK coverage, operating model and self-hostability, and pricing — plus when to use one, the other, or both.
- [Guide to OpenAI Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-openai-webhooks-features-and-best-practices.md): Comprehensive guide to OpenAI webhook features (Batch, fine-tuning, background Responses, evals, Realtime SIP), Standard Webhooks compliance, limitations, and best practices including signature verification, deduplication, ordering, and reconciliation
- [Guide to Gemini Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-gemini-webhooks-features-and-best-practices.md): Comprehensive guide to Gemini webhook features (Batch, Interactions, video generation), Standard Webhooks compliance, the static-vs-dynamic dual signing model (HMAC and RS256 JWT), limitations, and best practices including signature verification, deduplication, ordering, and reconciliation
- [How to Secure and Verify Gemini Webhooks with Hookdeck](/webhooks/platforms/how-to-secure-and-verify-gemini-webhooks-with-hookdeck.md): Guide to securing and verifying Gemini webhooks across both static (HMAC-SHA256, Standard Webhooks) and dynamic (RS256 JWT verified against Google's JWKS) configuration models, with Hookdeck
- [How to Test and Replay Gemini Webhooks Locally](/webhooks/platforms/how-to-test-and-replay-gemini-webhooks-locally.md): Guide to testing and replaying Gemini webhooks locally using the Hookdeck CLI as a stable HTTPS tunnel to localhost, covering both static and dynamic webhook flows
- [How to Secure and Verify OpenAI Webhooks with Hookdeck](/webhooks/platforms/how-to-secure-and-verify-openai-webhooks-with-hookdeck.md): Guide to securing and verifying OpenAI webhooks with Standard Webhooks HMAC-SHA256 signatures and Hookdeck
- [How to Test and Replay OpenAI Webhooks Locally](/webhooks/platforms/how-to-test-and-replay-openai-webhooks-locally.md): Guide to testing and replaying OpenAI webhooks locally using the Hookdeck CLI as a stable HTTPS tunnel to localhost
- [Guide to Claude Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-claude-webhooks-features-and-best-practices.md): Comprehensive guide to Claude Managed Agent webhook features, limitations, and best practices covering session, vault, agent, deployment, and deployment run event families, signature verification, deduplication, ordering, and reconciliation
- [How to Secure and Verify Claude Webhooks with Hookdeck](/webhooks/platforms/how-to-secure-and-verify-claude-webhooks-with-hookdeck.md): Guide to securing and verifying Claude Managed Agent webhooks with HMAC signatures and Hookdeck
- [How to Test and Replay Claude Webhooks Locally](/webhooks/platforms/how-to-test-and-replay-claude-webhooks-locally.md): Guide to testing and replaying Claude Managed Agent webhooks locally using the Hookdeck CLI
- [Webhook Delivery Guarantees: Comparing Hookdeck, Svix, Inngest, and AWS EventBridge](/webhooks/platforms/webhook-delivery-guarantees-comparison.md): In-depth comparison of webhook delivery guarantees across Hookdeck, Svix, Inngest, and AWS EventBridge, covering retry policies, deduplication windows, idempotency model, dead-letter queue behavior, replay tooling, ordering guarantees, and self-hostability for production webhook reliability.
- [Celery Alternatives for Webhook Retries: Hookdeck Event Gateway, RQ, Dramatiq, and Cloud Queues Compared](/webhooks/platforms/celery-alternatives-for-webhook-retries.md): In-depth comparison of Celery alternatives for webhook retries in Python applications, analyzing Hookdeck Event Gateway, RQ, Dramatiq, Convoy, AWS SQS, and Google Cloud Tasks across signature verification, per-source retry policies, payload visibility, replay, and operational footprint.
- [Kafka Alternatives for Webhook Ingestion: Hookdeck Event Gateway, Confluent, and Cloud Streams Compared](/webhooks/platforms/kafka-alternatives-for-webhook-ingestion.md): Comparison of Kafka alternatives for webhook ingestion pipelines, analyzing Hookdeck Event Gateway, Confluent Cloud, AWS Kinesis, Google Pub/Sub, and Convoy across HTTP-native ingestion, signature verification, per-event replay, in-flight transformation, and operational footprint.
- [A Turnkey Replacement for ngrok and RabbitMQ in Your Webhook Setup](/webhooks/platforms/ngrok-and-rabbitmq-replacement-for-webhooks.md): Comparison of unified replacements for the ngrok-plus-RabbitMQ webhook stack, analyzing Hookdeck CLI and Event Gateway, Cloudflare Tunnel with AWS SQS, localtunnel with Postgres queues, and Convoy on local tunneling, durable queueing, signature verification, retry policies, replay, and team workflows from development through production.
- [RabbitMQ Alternatives for Webhook Routing: Hookdeck Event Gateway, Convoy, and Cloud Queues Compared](/webhooks/platforms/rabbitmq-alternatives-for-webhooks.md): Action-oriented comparison of RabbitMQ alternatives for webhook routing, analyzing Hookdeck Event Gateway, Convoy, AWS SQS, Google Pub/Sub, and Postgres-backed queues across webhook-aware semantics, fan-out routing, retry policies, observability, and operational footprint.
- [Webhook.site Alternatives for Testing Webhooks: Hookdeck Console, RequestBin, Beeceptor, and Pipedream Compared](/webhooks/platforms/webhook-site-alternatives.md): Comparison of tools like webhook.site for inspecting and testing webhooks, analyzing Hookdeck Console, RequestBin, Beeceptor, Pipedream, and ngrok inspector on inspection depth, persistence, replay-to-localhost, provider sample libraries, team workflows, and the path from inspection to production webhook infrastructure.
- [Why most webhook-triggered agents don't need a workflow engine](/webhooks/platforms/most-webhook-agents-dont-need-a-workflow-engine.md): Argues that most webhook-triggered agents are LLM-in-a-handler patterns (model call + DB write + notification), not real workflows. Durable runtimes like Inngest, Trigger.dev, Hatchet, and Temporal earn their keep for multi-step workflows with waitpoints, compensations, long-running state, or scheduled follow-ups — not for three-function handlers. Covers the real failure modes (HTTP timeouts, crashes, transient downstream errors), what a queue plus handler gets you, the costs of runtime adoption (per-execution pricing, SDK lock-in, language lock-in), a checklist for when a runtime is warranted, and a YAGNI blueprint: Hookdeck gateway + idempotent handler + meaningful status codes.
- [Webhook Gateways and Durable Runtimes: Two Tools for Reliable Agent Workflows](/webhooks/platforms/webhook-gateway-vs-durable-runtime-agent-workflows.md): Comparison of webhook gateways (e.g. Hookdeck Event Gateway) and durable runtimes (Inngest, Trigger.dev, Hatchet) for reliable agent workflows. Gateways solve ingress: signature verification, dedup, durable queuing, retries, replay. Runtimes solve execution: checkpointed steps, per-step retries, long-running tasks, waitpoints, scheduling. Covers failure modes, when to use one vs both, common misconceptions, and how the two layers compose.
- [How to Secure and Verify HubSpot Webhooks with Hookdeck](/webhooks/platforms/how-to-secure-and-verify-hubspot-webhooks-with-hookdeck.md): Guide to securing and verifying HubSpot webhooks with HMAC-SHA256 signatures and Hookdeck
- [How to Secure and Verify Jira Webhooks with Hookdeck](/webhooks/platforms/how-to-secure-and-verify-jira-webhooks-with-hookdeck.md): Guide to securing and verifying Jira webhooks with HMAC signatures and Hookdeck
- [How to Secure and Verify Notion Webhooks with Hookdeck](/webhooks/platforms/how-to-secure-and-verify-notion-webhooks-with-hookdeck.md): Guide to securing and verifying Notion webhooks with HMAC-SHA256 signatures and Hookdeck
- [How to Secure and Verify PayPal Webhooks with Hookdeck](/webhooks/platforms/how-to-secure-and-verify-paypal-webhooks-with-hookdeck.md): Guide to securing and verifying PayPal webhooks with RSA-SHA256 signatures and Hookdeck
- [How to Secure and Verify Slack Webhooks with Hookdeck](/webhooks/platforms/how-to-secure-and-verify-slack-webhooks-with-hookdeck.md): Guide to securing and verifying Slack webhooks with HMAC signatures and Hookdeck
- [How to Test and Replay Notion Webhooks Locally with Hookdeck](/webhooks/platforms/how-to-test-and-replay-notion-webhooks-locally-with-hookdeck.md): Guide to testing Notion webhooks locally using Hookdeck CLI
- [How to Test and Replay Slack Webhooks Locally with Hookdeck](/webhooks/platforms/how-to-test-and-replay-slack-webhooks-locally-with-hookdeck.md): Guide to testing Slack Events API webhooks locally using Hookdeck CLI
- [GitHub agent automation: Hookdeck, Trigger.dev, and Claude](/webhooks/platforms/github-trigger-dev-claude-automation.md): Tutorial: GitHub agent automation via webhooks through Hookdeck to Trigger.dev REST task triggers (Bearer auth); Hookdeck CLI gateway connection upsert, trigger-wrapper transform for X-GitHub-Event and X-GitHub-Delivery, Trigger.dev idempotency (tasks.trigger vs REST options.idempotencyKey), PR/issue/push tasks with Claude; task router vs header-filtered connections; troubleshooting and FAQ. Demo in hookdeck-demos trigger-dev/github-ai-agent.
- [How to Connect External Webhooks to Claude Code Using Channels and Hookdeck CLI](/webhooks/platforms/claude-code-channels-webhooks-hookdeck.md): Step-by-step tutorial for building a Claude Code channel server that receives webhooks via Hookdeck CLI, covering MCP server setup, channel registration, mock webhook testing, and GitHub integration
- [Best Webhook Infrastructure Platforms for Reliable Event Delivery](/webhooks/platforms/best-webhook-infrastructure-platforms.md): Evaluation of webhook infrastructure platforms for reliable event delivery, comparing Hookdeck, Svix, Convoy, Hook0, and Webhook Relay across sending and receiving capabilities, queueing, observability, developer tooling, pricing, deployment, and compliance.
- [Best Webhook Testing Tools for Local Development](/webhooks/platforms/best-webhook-testing-tools-local-development.md): Comparison of webhook testing tools for local development, including Hookdeck CLI, ngrok, localtunnel, Cloudflare Tunnel, and localhost.run, covering event inspection, replay, filtering, stable URLs, team workflows, and pricing.
- [Best Webhook Testing Tools for Inspecting and Debugging Webhooks](/webhooks/platforms/best-webhook-testing-tools-inspecting-debugging.md): Comparison of webhook testing tools for inspecting and debugging webhooks, including Hookdeck Console, Webhook.site, RequestBin (Pipedream), Beeceptor, and webhook-tester, covering payload inspection, sample webhooks, mock responses, local development integration, and self-hosted options.
- [Best Cloudflare Tunnel Alternatives: Local Tunneling Tools for Webhook Development](/webhooks/platforms/cloudflare-tunnel-alternatives-for-local-webhook-development.md): Detailed comparison of Cloudflare Tunnel alternative local tunneling tools for webhook testing, including Hookdeck CLI, ngrok, localtunnel, and localhost.run, covering event inspection, replay, filtering, stable URLs, team workflows, free tier viability, and pricing.
- [Best ngrok Alternatives: Local Tunneling Tools for Webhook Development](/webhooks/platforms/ngrok-alternatives-for-local-tunnel-webhook-development.md): Detailed comparison of ngrok alternative local tunneling tools for webhook testing, including Hookdeck CLI, localtunnel, Cloudflare Tunnel, and localhost.run, covering event inspection, replay, filtering, stable URLs, team workflows, free tier viability, and pricing.
- [Best Webhook Gateway Solutions Compared](/webhooks/platforms/best-webhook-gateway-solutions.md): Comparison of webhook gateway solutions for receiving inbound webhooks, including Hookdeck Event Gateway, Svix Ingest, and Convoy, covering features, pricing, observability, queueing, filtering, and deployment options.
- [Best Webhook Management Platforms Compared](/webhooks/platforms/best-webhook-management-platforms.md): Evaluation of webhook management platforms for processing inbound webhooks, comparing Hookdeck Event Gateway, Svix Ingest, and Convoy across queueing, observability, filtering, deduplication, pricing, and self-hosting options.
- [Convoy Alternatives for Sending Webhooks](/webhooks/platforms/convoy-alternatives-sending.md): Detailed comparison of webhook sending solutions including Hookdeck Outpost, Svix Dispatch, and Hook0 as alternatives to Convoy for outbound webhook delivery, covering destination types, pricing, observability, customer portals, open source deployment, retries, security, rate limits, compliance, and developer experience.
- [Hookdeck Event Gateway Alternatives for Receiving Webhooks](/webhooks/platforms/hookdeck-event-gateway-alternatives.md): Comparison of webhook receiving platforms including Svix Ingest and Convoy as alternatives to Hookdeck Event Gateway, with G2 reviews, key differences, customer quotes, and reasons teams switch to Event Gateway.
- [Hook0 Alternatives for Sending Webhooks](/webhooks/platforms/hook0-alternatives.md): Detailed comparison of webhook sending solutions including Hookdeck Outpost, Svix Dispatch, and Convoy as alternatives to Hook0 for outbound webhook delivery, covering destination types, pricing, observability, customer portals, open source deployment, retries, security, rate limits, compliance, and developer experience.
- [Hookdeck Outpost Alternatives for Sending Webhooks](/webhooks/platforms/hookdeck-outpost-alternatives.md): Comparison of webhook sending platforms including Svix Dispatch, Convoy, and Hook0 as alternatives to Hookdeck Outpost, with G2 reviews, key differences, customer quotes, and reasons teams switch to Outpost.
- [Svix Alternatives for Sending Webhooks](/webhooks/platforms/svix-dispatch-alternatives.md): Detailed comparison of webhook sending solutions including Hookdeck Outpost, Convoy, and Hook0 as alternatives to Svix Dispatch, covering destination types, pricing, observability, customer portals, open source deployment, retries, security, rate limits, compliance, and developer experience.
- [Convoy Alternatives for Receiving Webhooks](/webhooks/platforms/convoy-alternatives-receiving.md): Detailed comparison of webhook receiving solutions including Hookdeck Event Gateway and Svix Ingest as alternatives to Convoy for inbound webhook infrastructure, covering pre-configured sources, queueing, filtering, deduplication, routing, observability, alerting, content types, retry logic, developer tools, compliance, deployment, and pricing.
- [Svix Alternatives for Receiving Webhooks](/webhooks/platforms/svix-ingest-alternatives.md): Detailed comparison of webhook receiving solutions including Hookdeck Event Gateway and Convoy as alternatives to Svix Ingest, covering pre-configured sources, queueing, filtering, deduplication, routing, observability, alerting, content types, retry logic, developer tools, compliance, and pricing.
- [Hookdeck Outpost vs Hook0: Webhook Sending Compared](/webhooks/platforms/hookdeck-outpost-vs-hook0-webhook-sending-comparison.md): Feature-by-feature comparison of Hookdeck Outpost and Hook0 for outbound webhook delivery infrastructure, covering destination types, pricing, observability, customer portals, open source deployment, retries, security, alerting, SDK support, and developer experience.
- [Hookdeck Event Gateway vs Convoy: Webhook Receiving Compared](/webhooks/platforms/hookdeck-event-gateway-vs-convoy-webhook-receiving-comparison.md): Feature-by-feature comparison of Hookdeck Event Gateway and Convoy for inbound webhook infrastructure, covering queueing, filtering, deduplication, routing, observability, alerting, content type support, retry logic, developer tools, and pricing.
- [Hookdeck Event Gateway vs Svix Ingest: Webhook Receiving Compared](/webhooks/platforms/hookdeck-event-gateway-vs-svix-ingest-webhook-receiving-comparison.md): Feature-by-feature comparison of Hookdeck Event Gateway and Svix Ingest for inbound webhook infrastructure, covering queueing, filtering, deduplication, routing, observability, alerting, content type support, retry logic, developer tools, and pricing.
- [Hookdeck Outpost vs Convoy: Webhook Sending Compared](/webhooks/platforms/hookdeck-outpost-vs-convoy-webhook-sending-comparison.md): Feature-by-feature comparison of Hookdeck Outpost and Convoy for outbound webhook delivery infrastructure, covering destination types, pricing, observability, customer portals, open source deployment, retries, security, rate limits, data retention, and developer experience.
- [Hookdeck Outpost vs Svix Dispatch: Webhook Sending Compared](/webhooks/platforms/hookdeck-outpost-vs-svix-dispatch-webhook-sending-comparison.md): Feature-by-feature comparison of Hookdeck Outpost and Svix Dispatch for outbound webhook delivery infrastructure, covering destination types, pricing, observability, customer portals, open source deployment, retries, security, rate limits, and developer experience.
- [How to Build Webhook-Triggered Linear Agents with Hookdeck CLI](/webhooks/platforms/how-to-build-linear-agents-with-hookdeck-cli.md): Step-by-step guide to building Linear AI agents using the Agent Interaction SDK and Hookdeck CLI, covering OAuth setup, webhook handling, agent activities, lifecycle management, and production deployment.
- [How to Run Claude Code as a Linear Agent: Webhook Triggers with Cyrus and Hookdeck CLI](/webhooks/platforms/how-to-run-claude-code-as-a-linear-agent-with-cyrus-and-hookdeck-cli.md): Step-by-step guide for setting up Claude Code as a Linear agent using Cyrus (an open-source agent runner) and Hookdeck CLI for local webhook tunneling, covering architecture, OAuth configuration, and persistent process management.
- [Guide to Salesforce Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-salesforce-webhooks-features-and-best-practices.md): Comprehensive guide covering Salesforce webhook features including Outbound Messages, Platform Events, Change Data Capture, Apex Callouts, and Flow HTTP Callouts, with payload structures, authentication methods, code examples, and workarounds for common limitations.
- [Guide to Docker Hub Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-docker-hub-webhooks-features-and-best-practices.md): Comprehensive guide covering Docker Hub webhook features, payload structure, security limitations, best practices with code examples, and workarounds for production deployments.
- [Guide to Worldline Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-worldline-webhooks-features-and-best-practices.md): Comprehensive guide to Worldline webhook implementation and best practices
- [Guide to Snipcart Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-snipcart-webhooks-features-and-best-practices.md): Comprehensive guide to Snipcart webhook implementation and best practices
- [Guide to HubSpot Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-hubspot-webhooks-features-and-best-practices.md): Comprehensive guide to HubSpot webhook implementation and best practices
- [Guide to Monday Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-monday-webhooks-features-and-best-practices.md): Comprehensive guide to monday.com webhook implementation and best practices
- [Guide to Notion Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-notion-webhooks-features-and-best-practices.md): Comprehensive guide to Notion webhook implementation and best practices
- [Track AI Agent Traffic to Your Docs with Vercel Log Drains, Hookdeck, and PostHog](/webhooks/platforms/track-ai-agent-traffic-vercel-log-drains-hookdeck-posthog.md): Tutorial: track AI agent traffic to machine-readable documentation using Vercel Log Drains, Hookdeck (filter + transformation), and PostHog. Covers .md/llms.txt filtering, anonymous distinct_id hashing, PostHog batch API, doc_view events, and analyzing user_agent and paths. Use with Hookdeck agent skill for CLI setup.
- [Guide to Coinbase Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-coinbase-webhooks-features-and-best-practices.md): Comprehensive guide to Coinbase webhook implementation and best practices
- [Guide to 2Checkout Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-2checkout-webhooks-features-and-best-practices.md): Comprehensive guide to 2Checkout webhook implementation and best practices
- [Guide to AfterShip Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-aftership-webhooks-features-and-best-practices.md): Comprehensive guide to AfterShip webhook implementation and best practices
- [Guide to SparkPost Webhooks Features and Best Practices](/webhooks/platforms/guide-to-sparkpost-webhooks-features-and-best-practices.md): Comprehensive guide to SparkPost webhook implementation and best practices
- [Guide to WordPress Webhooks Features and Best Practices](/webhooks/platforms/guide-to-wordpress-com-webhooks-features-and-best-practices.md): Comprehensive guide to WordPress.com webhook implementation and best practices
- [Guide to Worldpay Webhooks Features and Best Practices](/webhooks/platforms/guide-to-worldpay-webhooks-features-and-best-practices.md): Comprehensive guide to Worldpay webhook implementation and best practices
- [Guide to WhatsApp Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-whatsapp-webhooks-features-and-best-practices.md): Comprehensive guide to WhatsApp webhook implementation and best practices
- [Guide to Jira Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-jira-webhooks-features-and-best-practices.md): Comprehensive guide to Jira webhook implementation and best practices
- [Guide to LinkedIn Webhooks Features and Best Practices](/webhooks/platforms/guide-to-linkedin-webhooks-features-and-best-practices.md): Comprehensive guide to LinkedIn webhook implementation and best practices
- [Guide to Polar Webhooks Features and Best Practices](/webhooks/platforms/guide-to-polar-webhooks-features-and-best-practices.md): Comprehensive guide to Polar webhook implementation and best practices
- [Guide to SendGrid Webhooks Features and Best Practices](/webhooks/platforms/guide-to-sendgrid-webhooks-features-and-best-practices.md): Comprehensive guide to SendGrid webhook implementation and best practices
- [Guide to PayPal Webhooks Features and Best Practices](/webhooks/platforms/guide-to-paypal-webhooks-features-and-best-practices.md): Comprehensive guide to PayPal webhook implementation and best practices
- [Guide to Typeform Webhooks Features and Best Practices](/webhooks/platforms/guide-to-typeform-webhooks-features-and-best-practices.md): Comprehensive guide to Typeform webhook implementation and best practices
- [Guide to Slack Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-slack-webhooks-features-and-best-practices.md): Comprehensive guide to Slack webhook implementation and best practices
- [Guide to BigCommerce Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-bigcommerce-webhooks-features-and-best-practices.md): Comprehensive guide to BigCommerce webhook implementation covering order, product, cart, and customer events with signature verification, retry behavior, domain blocklisting, and production deployment patterns.
- [Using Hookdeck with OpenClaw: Reliable Webhooks for Your AI Agent](/webhooks/platforms/using-hookdeck-with-openclaw-reliable-webhooks-for-your-ai-agent.md): Guide for integrating Hookdeck with OpenClaw to provide persistent URLs, automatic retries, deduplication, and full observability for webhooks triggering AI agent actions.
- [Guide to Postmark Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-postmark-webhooks-features-and-best-practices.md): Comprehensive guide to Postmark webhook implementation and best practices
- [Guide to Adyen Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-adyen-webhooks-features-and-best-practices.md): Comprehensive guide to Adyen webhook implementation and best practices
- [Guide to Mailgun Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-mailgun-webhooks-features-and-best-practices.md): Comprehensive guide to Mailgun webhook implementation and best practices
- [How to Handle Out-of-Order and Duplicate Chargebee Webhook Events](/webhooks/platforms/how-to-handle-out-of-order-duplicate-chargebee-webhook-events.md): Guide to handling out-of-order and duplicate Chargebee webhook events with deduplication techniques and Hookdeck
- [How to Solve Adyen Webhook Timeout Errors](/webhooks/platforms/how-to-solve-adyen-webhook-timeout-errors.md): Guide to understanding and solving Adyen webhook timeout errors with Hookdeck
- [How to Solve Bitbucket Webhook Timeout Errors](/webhooks/platforms/how-to-solve-bitbucket-webhook-timeout-errors.md): Guide to understanding and solving Bitbucket webhook timeout errors with Hookdeck
- [How to Handle Duplicate Shopify Webhook Events](/webhooks/platforms/how-to-handle-duplicate-shopify-webhook-events.md): Guide to handling duplicate Shopify webhook events with deduplication techniques and Hookdeck
- [How to Secure and Verify Bitbucket Webhooks](/webhooks/platforms/how-to-secure-and-verify-bitbucket-webhooks-with-hookdeck.md): Guide to securing and verifying Bitbucket webhooks with HMAC signatures and Hookdeck
- [How to Secure and Verify Paddle Webhooks](/webhooks/platforms/how-to-secure-and-verify-paddle-webhooks-with-hookdeck.md): Guide to securing and verifying Paddle webhooks with HMAC signatures and Hookdeck
- [Guide to Bitbucket Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-bitbucket-webhooks-features-and-best-practices.md): Comprehensive guide to Bitbucket webhook implementation and best practices
- [Guide to Paddle Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-paddle-webhooks-features-and-best-practices.md): Comprehensive guide to Paddle webhook implementation and best practices
- [How to Solve Paddle Webhook Timeout Errors](/webhooks/platforms/how-to-solve-paddle-webhook-timeout-errors.md): Guide to understanding and solving Paddle's strict 5-second webhook timeout requirement
- [How to Solve GitLab's Automatic Webhook Disabling](/webhooks/platforms/how-to-solve-gitlab-automatic-webhook-disabling.md): Guide to understanding and solving GitLab's automatic webhook disabling after consecutive failures
- [How to Solve GitLab Webhook Timeout Errors](/webhooks/platforms/how-to-solve-gitlab-webhook-timeout-errors.md): Guide to understanding and solving GitLab webhook timeout errors with Hookdeck
- [Guide to Stripe Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-stripe-webhooks-features-and-best-practices.md): Comprehensive guide to Stripe webhook implementation and best practices
- [Guide to GitLab Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-gitlab-webhooks-features-and-best-practices.md): Comprehensive guide to GitLab webhook implementation and best practices
- [How to Prevent Duplicate WooCommerce Webhooks](/webhooks/platforms/how-to-prevent-duplicate-woocommerce-webhooks.md): Guide to handling duplicate WooCommerce webhooks with idempotency patterns and deduplication strategies
- [How to Solve WooCommerce's 5 Delivery Failure Webhook Disabling](/webhooks/platforms/how-to-solve-woocommerce-5-delivery-failure-webhook-disabling.md): Guide to understanding and solving WooCommerce's automatic webhook disabling after delivery failures
- [Guide to Grafana Webhooks Features and Best Practices](/webhooks/platforms/guide-to-grafana-webhooks-features-and-best-practices.md): Comprehensive guide to Grafana webhook implementation and best practices
- [Guide to WooCommerce Webhooks Features and Best Practices](/webhooks/platforms/guide-to-woocommerce-webhooks-features-and-best-practices.md): Comprehensive guide to WooCommerce webhook implementation and best practices
- [How to Solve Grafana Webhook Timeout Errors](/webhooks/platforms/how-to-solve-grafana-webhook-timeout-errors.md): Tutorial for resolving Grafana webhook timeout and retry issues
- [How to Reduce Make.com Credit Usage](/webhooks/platforms/how-to-reduce-make-com-credit-usage.md): Comprehensive guide covering Make.com's credit-based billing system and optimization strategies including early filtering, batch operations, webhook triggers vs watch modules, Data Store caching, AI module optimization, and using Hookdeck Event Gateway to reduce webhook costs.
- [How to Prevent n8n Webhook Overload and Server Crashes](/webhooks/platforms/how-to-prevent-n8n-webhook-overload.md): Tutorial for preventing n8n webhook overload and server crashes using Hookdeck
- [How to Solve Zapier Webhook Rate Limit Errors](/webhooks/platforms/how-to-solve-zapier-webhook-rate-limit-errors.md): Tutorial for resolving Zapier webhook rate limiting issues with Hookdeck
- [Build Real-Time Order Notifications for Shopify with Webhooks and Ably WebSockets](/webhooks/platforms/real-time-shopify-notifications-webhooks-websockets.md): Guide for building real-time order notification systems for Shopify using webhooks, Hookdeck event gateway, and Ably WebSockets. Covers end-to-end observability, PII removal, and production deployment.
- [Stripe Thin Events: Best Practices Guide](/webhooks/platforms/stripe-thin-events-best-practices.md): Guide to handling Stripe thin events at scale with Hookdeck, focusing on rate limiting, deduplication, and fetch-before-process patterns
- [Build, Test, and Debug Chargebee Webhooks on Localhost](/webhooks/platforms/build-test-and-debug-chargebee-billing-webhooks-on-localhost.md): Comprehensive guide teaching developers how to build, test, and debug Chargebee Billing webhook handlers during local development using Hookdeck CLI's interactive mode. Covers iterative handler development with retry functionality acting as hot-reload for webhooks, building test event libraries with bookmarks, inspecting payloads, debugging server responses, testing error scenarios, and advanced debugging techniques for professional webhook development workflows.
- [How to Get Started with Chargebee Webhooks](/webhooks/platforms/get-started-with-chargebee-billing-webhooks.md): Tutorial teaching developers how to implement Chargebee Billing webhooks for subscription billing. Covers creating webhook endpoints in Chargebee, testing on localhost with Hookdeck CLI, implementing basic authentication, handling retries and idempotency, and deploying to production with Hookdeck Event Gateway.
- [How to Configure Shopify Webhooks and Fix Duplicate Webhook Subscriptions](/webhooks/platforms/shopify-embedded-app-webhook-configuration.md): Step-by-step tutorial for developers on configuring Shopify webhooks in embedded apps. Explains how to prevent duplicate webhook subscriptions by correctly using shopify.app.toml instead of defining webhooks in both shopify.app.toml and the shopifyApp() function. Includes working code examples for Shopify embedded app webhook configuration.
- [The Definitive Guide to Reliably Working with Shopify Webhooks over HTTPS Using Hookdeck](/webhooks/platforms/definitive-guide-shopify-webhooks-https-hookdeck.md): Comprehensive guide for developers building production Shopify apps with HTTPS webhooks. Covers Shopify's recommendations, Hookdeck's solutions for reliability issues, signature verification in multiple languages, and advanced webhook patterns.
- [How to Solve Make.com Webhook Rate Limit Errors](/webhooks/platforms/how-to-solve-make-com-webhook-rate-limit-errors.md): Tutorial for resolving Make.com webhook rate limiting issues
- [How to Receive Webhooks with GCP Pub/Sub](/webhooks/platforms/receive-webhooks-gcp-pubsub.md): Tutorial for integrating webhook events with Google Cloud Pub/Sub messaging service, demonstrating how to route and process webhook data through cloud-native messaging infrastructure.
- [How to Choose an Asynchronous AI Platform](/webhooks/platforms/choose-asynchronous-ai-platform.md): Guide to selecting asynchronous AI platforms for event-driven AI applications
- [Index Anything, Search Everything: Scalable Vector Search with Replicate AI, MongoDB, and Hookdeck](/webhooks/platforms/scalable-vector-search-replicate-ai-mongodb-hookdeck.md): Advanced guide for building AI-powered vector search applications using Replicate AI models, MongoDB Atlas vector search, and Hookdeck for webhook-driven data processing.
- [Per-User Database Architecture with Xata, Clerk Webhooks, Hookdeck, and Next.js](/webhooks/platforms/per-user-database-architecture-xata-clerk-hookdeck-nextjs.md): Technical tutorial demonstrating how to build scalable per-user database architecture using Xata databases, Clerk authentication, and Hookdeck webhooks in Next.js applications.
- [Google Eventarc Alternatives for Event-Driven Architectures: Comparing Hookdeck Event Gateway, Amazon EventBridge, Azure Event Grid, and Confluent Kafka](/webhooks/platforms/google-eventarc-alternatives.md): Comprehensive comparison of Google Eventarc alternatives including Hookdeck Event Gateway, Amazon EventBridge, Azure Event Grid, and Confluent Kafka for event-driven applications
- [Confluent Kafka Alternatives for Event-Driven Applications: Comparing Hookdeck Event Gateway, Amazon EventBridge, Azure Event Grid, and Google Eventarc](/webhooks/platforms/confluent-kafka-alternatives.md): In-depth comparison of Confluent Kafka alternatives for event-driven applications, analyzing Hookdeck Event Gateway, Amazon EventBridge, Azure Event Grid, and Google Eventarc across key capabilities
- [Azure Event Grid Alternatives: Comparing Hookdeck Event Gateway, Amazon EventBridge, Google Eventarc, and Confluent Kafka](/webhooks/platforms/azure-event-grid-alternatives.md): Comprehensive analysis comparing Azure Event Grid with Hookdeck Event Gateway, Amazon EventBridge, Google Eventarc, and Confluent Kafka for event-driven architecture implementations
- [Amazon EventBridge Alternatives: Comparing Hookdeck Event Gateway, Azure Event Grid, Google Eventarc, and Confluent Kafka](/webhooks/platforms/amazon-eventbridge-alternatives.md): Detailed comparison of event gateway solutions including Hookdeck Event Gateway, Azure Event Grid, Google Eventarc, and Confluent Kafka, covering integrations, event processing, storage, and operational impact
- [Event Gateway Comparison: Amazon EventBridge, Azure Event Grid, Google Eventarc, Confluent Kafka, and Hookdeck Event Gateway](/webhooks/platforms/event-gateway-comparison.md): Detailed comparison of event gateway tools including Amazon EventBridge, Azure Event Grid, Google Eventarc, Confluent Kafka, and Hookdeck Event Gateway for building event-driven architectures
- [How to Receive and Replay External Webhooks in Zapier with Hookdeck](/webhooks/platforms/how-to-receive-and-replay-external-webhooks-in-zapier-with-hookdeck.md): Tutorial for integrating webhooks with Zapier automation using Hookdeck
- [How to Receive and Replay Webhooks in Jira with Hookdeck](/webhooks/platforms/how-to-receive-and-replay-webhooks-in-jira-with-hookdeck.md): Guide to integrating webhooks with Jira project management using Hookdeck
- [How to Receive and Replay External Webhooks in n8n with Hookdeck](/webhooks/platforms/how-to-receive-and-replay-external-webhooks-in-n8n-with-hookdeck.md): Guide to integrating webhooks with n8n workflow automation using Hookdeck
- [How to Receive and Replay External Webhooks in AWS Lambda with Hookdeck](/webhooks/platforms/how-to-receive-and-replay-external-webhooks-in-aws-lambda-with-hookdeck.md): Guide to integrating external webhooks with AWS Lambda using Hookdeck Event Gateway with AWS destination authentication
- [How to Receive and Replay External Webhooks in Railway with Hookdeck](/webhooks/platforms/how-to-receive-and-replay-external-webhooks-in-railway-with-hookdeck.md): Guide to integrating webhooks with Railway deployment platform using Hookdeck
- [How to Receive and Replay External Webhooks in Slack with Hookdeck](/webhooks/platforms/how-to-receive-and-replay-external-webhooks-in-slack-with-hookdeck.md): Tutorial for integrating external webhooks with Slack using Hookdeck
- [How to Receive and Replay External Webhooks in Azure Functions with Hookdeck](/webhooks/platforms/how-to-receive-and-replay-external-webhooks-in-azure-functions-with-hookdeck.md): Tutorial for integrating webhooks with Azure Functions through Hookdeck
- [How to Receive and Replay Webhooks with Google Cloud Run functions using Hookdeck](/webhooks/platforms/how-to-receive-and-replay-external-webhooks-in-google-cloud-functions.md): Guide to integrating webhooks with Google Cloud Functions
- [How to Receive and Replay External Webhooks in Supabase Edge Functions with Hookdeck](/webhooks/platforms/how-to-receive-and-replay-external-webhooks-in-supabase-edge-functions.md): Tutorial for integrating external webhooks with Supabase Edge Functions using Hookdeck
- [How to Receive and Replay Webhooks in Netlify Functions with Hookdeck](/webhooks/platforms/how-to-receive-and-replay-external-webhooks-in-netlify-functions.md): Tutorial for receiving webhooks in Netlify Functions
- [How to Receive and Replay Webhooks in Vercel Serverless Functions with Hookdeck](/webhooks/platforms/how-to-receive-and-replay-external-webhooks-in-vercel-serverless-functions.md): Guide to receiving webhooks in Vercel serverless functions
- [How to Receive and Replay External Webhooks in Cloudflare with Hookdeck](/webhooks/platforms/how-to-receive-and-replay-external-webhooks-in-cloudflare-with-hookdeck.md): Tutorial for receiving webhooks in Cloudflare Workers using Hookdeck
- [How to Secure and Verify WooCommerce Webhooks with Hookdeck](/webhooks/platforms/how-to-secure-and-verify-woocommerce-webhooks-with-hookdeck.md): Tutorial for securing WooCommerce webhooks using Hookdeck verification
- [How to Test and Replay Pipedrive Webhook Events on localhost with Hookdeck](/webhooks/platforms/how-to-test-and-replay-pipedrive-webhook-events-on-localhost-with-hookdeck.md): Step-by-step instructions for creating Pipedrive CRM webhooks for organization events, connecting them to localhost applications via Hookdeck, and testing webhook delivery.
- [How to Test and Replay BigCommerce Webhook Events on localhost with Hookdeck Console](/webhooks/platforms/how-to-test-and-replay-bigcommerce-webhook-events-on-localhost-with-hookdeck.md): Guide to testing BigCommerce webhooks locally using Hookdeck
- [How to Test and Replay WooCommerce Webhook Events on localhost with Hookdeck ](/webhooks/platforms/how-to-test-and-replay-woocommerce-webhook-events-on-localhost-with-hookdeck.md): Tutorial for configuring WooCommerce e-commerce webhooks to capture product creation events and testing them locally using Hookdeck's webhook management platform.
- [How to Test and Replay GitLab Webhooks on localhost with Hookdeck](/webhooks/platforms/how-to-test-and-replay-gitlab-webhooks-on-localhost-with-hookdeck.md): Guide to testing GitLab webhooks locally using Hookdeck CLI
- [How to Test and Replay GitHub Webhook Events on localhost with Hookdeck](/webhooks/platforms/how-to-test-and-replay-github-webhook-events-on-localhost-with-hookdeck.md): Tutorial for testing GitHub webhooks in local development environment
- [How to Test and Replay Docker Hub Webhooks on localhost with Hookdeck](/webhooks/platforms/how-to-test-docker-hub-webhooks-on-localhost-with-hookdeck.md): Guide for setting up Docker Hub repository webhooks to trigger on image pushes and testing them locally through Hookdeck's webhook infrastructure with Node.js applications.
- [How to Secure and Verify Adyen Webhooks with Hookdeck](/webhooks/platforms/how-to-secure-and-verify-adyen-webhooks-with-hookdeck.md): Security guide for implementing Adyen webhook verification with Hookdeck
- [How to Secure and Verify GitHub Webhooks with Hookdeck](/webhooks/platforms/how-to-secure-and-verify-github-webhooks-with-hookdeck.md): Security tutorial for implementing GitHub webhook verification with Hookdeck
- [How to Secure and Verify GitLab Webhooks with Hookdeck](/webhooks/platforms/how-to-secure-and-verify-gitlab-webhooks-with-hookdeck.md): Guide to securing GitLab webhooks using Hookdeck verification mechanisms
- [How to Secure and Verify Stripe Webhooks with Hookdeck](/webhooks/platforms/how-to-secure-and-verify-stripe-webhooks-with-hookdeck.md): Security guide for implementing Stripe webhook verification with Hookdeck
- [How to Test and Replay Adyen Webhook Events on localhost with Hookdeck](/webhooks/platforms/how-to-test-and-replay-adyen-webhook-events-on-localhost-with-hookdeck.md): Tutorial for testing Adyen webhooks in local development environment
- [How to Test and Replay Checkout Webhook Events on localhost with Hookdeck](/webhooks/platforms/how-to-test-and-replay-checkout-webhook-events-on-localhost-with-hookdeck.md): Guide to testing Checkout.com webhooks locally
- [How to Test and Replay Paddle Billing Webhooks Events on localhost with Hookdeck](/webhooks/platforms/how-to-test-and-replay-paddle-webhooks-events-on-localhost-with-hookdeck.md): Comprehensive tutorial for setting up Paddle Billing webhooks, creating notification destinations, and testing product creation events through Hookdeck's webhook infrastructure.
- [How to Test PayPal Webhook Events on localhost with Hookdeck](/webhooks/platforms/how-to-test-paypal-webhook-events-on-localhost-with-hookdeck.md): Instructions for creating PayPal webhook destinations for billing plan events, configuring authentication, and testing webhook delivery to localhost applications using Hookdeck.
- [How to Test and Replay Stripe Webhooks Locally](/webhooks/platforms/how-to-test-and-replay-stripe-webhooks-locally.md): Complete guide to setting up Stripe payment webhooks, using Hookdeck CLI to expose localhost endpoints, and testing payment link creation events with webhook replay capabilities.
- [Guide to Zendesk Webhooks Features and Best Practices](/webhooks/platforms/guide-to-zendesk-webhooks-features-and-best-practices.md): Comprehensive guide to Zendesk webhook implementation and best practices
- [How to Create Zendesk Webhooks With the Zendesk API Tutorial](/webhooks/platforms/how-to-create-zendesk-webhooks-with-the-zendesk-api-tutorial.md): Step-by-step guide to creating Zendesk webhooks using the API
- [How to Solve "Shopify: Exceeded 2 Calls per Second for API Client" for Webhooks](/webhooks/platforms/how-to-solve-shopify-exceeded-2-calls-per-second-for-api-client-for-webhooks.md): Solution for handling Shopify webhook rate limiting issues
- [Guide to Discord Webhooks: Features and Best Practices](/webhooks/platforms/guide-to-discord-webhooks-features-and-best-practices.md): Complete guide to Discord webhook features including security, scalability, and best practices for production deployment
- [How to Get Started with Discord Webhooks](/webhooks/platforms/how-to-get-started-with-discord-webhooks.md): Beginner guide to implementing Discord webhooks for community automation
- [Tutorial: How to Configure Discord Webhooks Using the API](/webhooks/platforms/tutorial-how-to-configure-discord-webhooks-using-the-api.md): Technical tutorial for programmatically creating and managing Discord webhooks using Discord's API for automated messaging and bot integrations.
- [Tutorial: How to Configure Discord Webhooks Using the Admin Interface](/webhooks/platforms/tutorial-how-to-configure-discord-webhooks-using-the-admin-interface.md): Guide for setting up Discord webhooks through the Discord admin interface to send automated messages and notifications to Discord channels.
- [Getting Started with Shopify Webhooks Guide](/webhooks/platforms/getting-started-shopify-webhooks-guide.md): Beginner-friendly guide to implementing Shopify webhooks for e-commerce integrations
- [How to Create Shopify Webhooks with the Shopify Admin API Tutorial](/webhooks/platforms/how-create-shopify-webhooks-with-shopify-api-tutorial.md): Tutorial for creating Shopify webhooks programmatically using the Shopify API
- [Guide To CircleCI Webhooks Features And Best Practices](/webhooks/platforms/circleci-webhooks-features-and-best-practices-guide.md): Comprehensive guide to CircleCI webhook features and implementation best practices
- [CircleCI Webhooks Tutorial](/webhooks/platforms/circleci-webhooks-tutorial.md): Step-by-step tutorial for setting up and using CircleCI webhooks
- [The top 5 use cases for CircleCI webhooks](/webhooks/platforms/top-use-cases-circleci-webhooks.md): Overview of common CircleCI webhook implementations including build notifications, deployment triggers, test result processing, and CI/CD pipeline automation scenarios.
- [Getting started with CircleCI webhooks](/webhooks/platforms/getting-started-circleci-webhooks.md): Beginner guide to implementing CircleCI webhooks for CI/CD automation
- [Guide to GitHub Webhooks Features and Best Practices](/webhooks/platforms/guide-github-webhooks-features-and-best-practices.md): Comprehensive guide to GitHub webhook features and implementation best practices
- [Top 5 Use Cases for Github Webhooks](/webhooks/platforms/top-use-cases-github-webhooks.md): Guide covering popular GitHub webhook applications including automated deployments, issue tracking, pull request workflows, and repository event-driven automation.
- [Guide for Troubleshooting GitHub Webhooks](/webhooks/platforms/guide-troubleshooting-github-webhooks.md): Troubleshooting guide for common GitHub webhook issues and their solutions
- [Tutorial for Setting Up GitHub Webhooks](/webhooks/platforms/tutorial-github-webhooks.md): Step-by-step tutorial for setting up GitHub webhooks, implementing HMAC security validation, and creating automated workflows triggered by repository events.
- [Getting Started with GitHub Webhooks](/webhooks/platforms/getting-started-github-webhooks.md): Introduction to GitHub webhooks including setup, configuration, and common use cases
- [Guide to Okta Webhooks: Features and Best Practices](/webhooks/platforms/okta-webhooks-features-and-best-practices-guide.md): Comprehensive guide covering Okta Event Hook features, payload structure, setup via Admin Console and API, verification challenge handling, authentication best practices with code examples, and limitations with workarounds for production deployments.
- [Guide to Twilio Webhooks: Features and Best Practices](/webhooks/platforms/twilio-webhooks-features-and-best-practices-guide.md): Comprehensive guide to Twilio webhook implementation covering SMS, voice, WhatsApp, and Conversations events with security best practices, TwiML responses, and production deployment patterns.
- [How to Synchronize Orders with Shopify Webhooks](/webhooks/platforms/how-to-synchronize-orders-shopify-webhooks.md): Guide to implementing order synchronization using Shopify webhooks
- [Guide to Shopify Webhooks Features and Best Practices](/webhooks/platforms/shopify-webhooks-features-and-best-practices-guide.md): Comprehensive guide to Shopify webhook implementation and best practices

### Webhook Skills
- [Adyen Webhooks](/webhooks/skills/adyen-webhooks.md): Receive and verify Adyen webhooks (standard notifications). Use when setting up Adyen webhook handlers, debugging HMAC signature verification, or handling payment events like AUTHORISATION, CAPTURE, REFUND, CANCELLATION, and CHARGEBACK.
- [AfterShip Webhooks](/webhooks/skills/aftership-webhooks.md): Receive and verify AfterShip webhooks. Use when setting up AfterShip webhook handlers, debugging AfterShip signature verification (aftership-hmac-sha256, as-signature-hmac-sha256, am-webhook-signature), or handling AfterShip Tracking events like tracking_update, edd_revise and tracking_pending_time, AfterShip Returns events like return.approved, AfterShip Warranty events like warranty.created, and AfterShip Shipping (Postmen) events like create_a_label.
- [AiPrise Webhooks](/webhooks/skills/aiprise-webhooks.md): Receive and verify AiPrise webhooks (callbacks). Use when setting up AiPrise identity/KYC/KYB callback handlers, debugging X-HMAC-SIGNATURE verification, or handling verification results like APPROVED, DECLINED, REVIEW, and UNKNOWN.
- [Aircall Webhooks](/webhooks/skills/aircall-webhooks.md): Receive and verify Aircall webhooks. Use when setting up Aircall webhook handlers, debugging Aircall webhook token verification, or handling Aircall cloud phone events like call.created, call.answered, call.ended, message.received, contact.updated, or user.connected.v2. Aircall does NOT use an HMAC signature — verification is a timing-safe comparison of the `token` field inside the JSON body.
- [Airtable Webhooks](/webhooks/skills/airtable-webhooks.md): Receive and verify Airtable webhooks. Use when setting up Airtable webhook handlers, debugging X-Airtable-Content-MAC signature verification, handling the thin-ping notification, or fetching base changes (tableData, tableFields, tableMetadata add/remove/update) from the webhook payloads API.
- [Airwallex Webhooks](/webhooks/skills/airwallex-webhooks.md): Receive and verify Airwallex webhooks. Use when setting up Airwallex webhook handlers, debugging x-signature / x-timestamp signature verification, or handling payment events like payment_intent.succeeded, payment_attempt.paid, refund.settled, payment_consent.verified, or payment_dispute.requires_response.
- [Akeneo Webhooks](/webhooks/skills/akeneo-webhooks.md): Receive and verify Akeneo PIM (Events API) webhooks. Use when setting up Akeneo webhook handlers, debugging x-akeneo-request-signature verification, or handling batched product and product-model events like product.created, product.updated, product.removed, product_model.created, product_model.updated, or product_model.removed.
- [Alchemy Webhooks](/webhooks/skills/alchemy-webhooks.md): Receive and verify Alchemy Notify webhooks. Use when setting up Alchemy webhook handlers, debugging X-Alchemy-Signature verification, or handling onchain events like ADDRESS_ACTIVITY, NFT_ACTIVITY, or GRAPHQL (Custom Webhook).
- [Alipay Webhooks](/webhooks/skills/alipay-webhooks.md): Receive and verify Alipay (Antom / Alipay+) webhook notifications. Use when setting up Alipay webhook handlers, debugging RSA256 Signature header verification, or handling payment events like notifyPayment, notifyCapture, notifyRefund, notifyAuthorization, and notifyDispute.
- [Asana Webhooks](/webhooks/skills/asana-webhooks.md): Receive and verify Asana webhooks. Use when setting up Asana webhook handlers, implementing the X-Hook-Secret handshake, debugging X-Hook-Signature verification, or handling task, project, and story events like added, changed, removed, deleted, and undeleted.
- [Ascend Webhooks](/webhooks/skills/ascend-webhooks.md): Receive and verify Ascend webhooks. Use when setting up Ascend webhook handlers, debugging Ascend signature verification (X-Ascend-Signature, HMAC-SHA256), or handling insurance payment events like invoice.paid, payout.paid, and refund.paid.
- [Ashby Webhooks](/webhooks/skills/ashby-webhooks.md): Receive and verify Ashby webhooks. Use when setting up Ashby webhook handlers, debugging Ashby-Signature verification, or handling recruiting events like applicationSubmit, candidateHire, candidateStageChange, or interviewScheduleCreate.
- [Attentive Webhooks](/webhooks/skills/attentive-webhooks.md): Receive and verify Attentive webhooks. Use when setting up Attentive webhook handlers, debugging signature verification (x-attentive-hmac-sha256), or handling SMS and email events like sms.subscribed, sms.unsubscribed, email.opened, or custom_attribute.set.
- [Auth0 Webhooks](/webhooks/skills/auth0-webhooks.md): Receive and verify Auth0 webhooks delivered via Custom Log Streams (HTTP). Use when setting up an Auth0 log stream HTTP endpoint, validating the configured Authorization token, or handling batched authentication log events like s (success login), f (failed login), ss (signup), and sepft (password-grant token exchange).
- [AWS SNS Webhooks](/webhooks/skills/aws-sns-webhooks.md): Receive and verify AWS SNS (Amazon Simple Notification Service) webhooks over HTTP/HTTPS. Use when setting up an SNS HTTP subscription endpoint, confirming a subscription (SubscriptionConfirmation / SubscribeURL), verifying SNS message signatures (SigningCertURL, SignatureVersion 1 SHA1 / 2 SHA256), or handling Notification and UnsubscribeConfirmation messages.
- [Azure Event Grid Webhooks](/webhooks/skills/azure-event-grid-webhooks.md): Receive and validate Azure Event Grid webhook deliveries. Use when setting up an Event Grid WebHook event handler, implementing the Microsoft.EventGrid.SubscriptionValidationEvent handshake (echo data.validationCode as validationResponse with HTTP 200), implementing the CloudEvents v1.0 HTTP OPTIONS abuse-protection preflight (WebHook-Request-Origin / WebHook-Allowed-Origin), checking the aeg-subscription-name / aeg-event-type / aeg-delivery-count headers, authenticating deliveries with a static delivery-property header or a Microsoft Entra ID bearer token, parsing Event Grid schema arrays vs CloudEvents objects, or handling events like Microsoft.Storage.BlobCreated. Event Grid does NOT sign the request body — there is no HMAC signature.
- [BaseLinker Webhooks](/webhooks/skills/baselinker-webhooks.md): Receive BaseLinker (Base.com) webhooks. Use when building a BaseLinker order or warehouse callback receiver, because BaseLinker is not a normal webhook source: deliveries arrive as HTTP HEAD requests with NO body, the entire payload is in the query string (observed params: order_id, state), there is NO signature verification of any kind (no HMAC, no secret, no handshake), and your response must be a bare bodyless 200. Use when debugging an empty req.body, wiring app.head / an exported HEAD route handler / @app.head, or polling getJournalList for change tracking.
- [BigCommerce Webhooks](/webhooks/skills/bigcommerce-webhooks.md): Receive and verify BigCommerce webhooks. Use when setting up BigCommerce webhook handlers, debugging Standard Webhooks signature verification, or handling store events like store/order/created, store/order/statusUpdated, store/product/updated, or store/cart/abandoned.
- [Bitbucket Webhooks](/webhooks/skills/bitbucket-webhooks.md): Receive and verify Bitbucket Cloud webhooks. Use when setting up Bitbucket webhook handlers, debugging X-Hub-Signature verification, or handling repository and pull request events like repo:push, pullrequest:created, pullrequest:updated, pullrequest:fulfilled, or pullrequest:rejected.
- [Bridge (bridge.xyz) Webhooks](/webhooks/skills/bridge-xyz-webhooks.md): Receive and verify Bridge (bridge.xyz) webhooks. Use when setting up Bridge webhook handlers, debugging RSA signature verification of the X-Webhook-Signature header, or handling stablecoin/fiat events like customer.updated, kyc_link.updated, transfer.updated, and virtual_account.activity.
- [Bridge API Webhooks](/webhooks/skills/bridge-api-webhooks.md): Receive and verify Bridge API webhooks (bridgeapi.io — the open-banking aggregator by Bridge/Bankin', NOT bridge.xyz). Use when setting up Bridge API webhook handlers, debugging BridgeApi-Signature HMAC-SHA256 verification, or handling events like item.created, item.refreshed, item.account.updated, payment.transaction.created, or user.deleted.
- [Bunny Stream Webhooks](/webhooks/skills/bunny-stream-webhooks.md): Receive and verify Bunny Stream webhooks. Use when setting up Bunny Stream webhook handlers, debugging X-BunnyStream-Signature verification, or handling video encoding events like Status 3 (Finished / encoding done), Status 5 (Failed), or captions and title/description generation.
- [Calendly Webhooks](/webhooks/skills/calendly-webhooks.md): Receive and verify Calendly webhooks. Use when setting up Calendly webhook handlers, debugging Calendly signature verification, or handling scheduling events like invitee.created, invitee.canceled, invitee_no_show.created, or routing_form_submission.created.
- [Chargebee Webhooks](/webhooks/skills/chargebee-webhooks.md): Receive and verify Chargebee webhooks. Use when setting up Chargebee webhook handlers, debugging Basic Auth verification, or handling subscription billing events.
- [Checkout.com Webhooks](/webhooks/skills/checkout-com-webhooks.md): Receive and verify Checkout.com webhooks (checkout.com — the global payments processor: card acquiring, APMs, disputes, payouts, issuing). Use when setting up a Checkout.com webhook handler, debugging Cko-Signature verification, or handling events like payment_approved, payment_captured, payment_declined, payment_refunded, dispute_received or fraud_reported. Checkout.com signs with HMAC-SHA256 over the RAW body, hex-encoded, in the Cko-Signature header, and can optionally send a static Authorization header key. Not Checkout Page (checkoutpage.com), not CheckoutJoy, not 2Checkout / Verifone, not Stripe Checkout, not Shopify checkout webhooks.
- [Circle Webhooks](/webhooks/skills/circle-webhooks.md): Receive and verify Circle Payments Network (CPN) v2 webhooks. Use when setting up Circle webhook handlers, debugging ECDSA signature verification (X-Circle-Signature, X-Circle-Key-Id), or handling notifications like cpn.payment.*, cpn.transaction.*, and cpn.rfi.*.
- [CircleCI Webhooks](/webhooks/skills/circleci-webhooks.md): Receive and verify CircleCI outbound webhooks. Use when setting up a CircleCI webhook handler, debugging `circleci-signature` verification, or handling the `workflow-completed` and `job-completed` events CircleCI sends when a workflow or job reaches a terminal state. CircleCI signs the raw body with HMAC-SHA256 and sends a hex digest in a comma-separated versioned list (`v1=<hex>`) — only the latest version (`v1`) should ever be checked. Not Circle (circle.com, USDC/Circle Mint, ECDSA `X-Circle-Signature`) — unrelated company. Not CircleCI custom webhooks, which are inbound pipeline triggers going the other direction.
- [Cisco Meraki Webhooks](/webhooks/skills/meraki-webhooks.md): Receive and verify Cisco Meraki Dashboard webhook alerts. Use when setting up Meraki webhook handlers, validating the sharedSecret, or handling alert events like motion_alert, settings_changed, sensor_alert, or stopped_reporting.
- [Claude Managed Agents Webhooks](/webhooks/skills/claude-managed-agents-webhooks.md): Receive and verify Anthropic Claude Managed Agents (CMA) webhooks. Use when setting up Claude Managed Agents webhook handlers, debugging signature verification, or handling agent session and vault events like session.status_idled, session.status_terminated, session.thread_created, vault.created, or vault_credential.refresh_failed.
- [Clerk Webhooks](/webhooks/skills/clerk-webhooks.md): Receive and verify Clerk webhooks. Use when setting up Clerk webhook handlers, debugging signature verification, or handling user events like user.created, user.updated, session.created, or organization.created.
- [Clio Webhooks](/webhooks/skills/clio-webhooks.md): Receive and verify Clio (Clio Manage) webhooks. Use when setting up Clio webhook handlers, debugging X-Hook-Signature verification, completing the X-Hook-Secret handshake, or handling legal practice events like matter.created, contact.updated, activity.created, or bill events.
- [Cloudinary Webhooks](/webhooks/skills/cloudinary-webhooks.md): Receive and verify Cloudinary webhooks (notifications). Use when setting up a Cloudinary notification receiver, verifying the x-cld-signature and x-cld-timestamp headers with the official cloudinary SDK, debugging Cloudinary signature verification failures, or handling notification_type events like upload, eager, delete, rename, moderation, and resource_tags_changed.
- [CloudSignal Webhooks](/webhooks/skills/cloudsignal-webhooks.md): Receive and verify CloudSignal webhooks from Cloudprinter.com. Use when setting up a CloudSignal Webhooks v2.0 receiver, authenticating deliveries by the plaintext `apikey` field in the JSON body (there is NO HMAC signature header), or handling print order/item status signals like CloudprinterOrderValidated, ItemProduced, ItemShipped, ItemError, and ItemCanceled.
- [Coinbase Commerce Webhooks](/webhooks/skills/coinbase-commerce-webhooks.md): Receive and verify Coinbase Commerce webhooks. Use when setting up Coinbase Commerce webhook handlers, debugging X-CC-Webhook-Signature verification, or handling cryptocurrency payment events like charge:created, charge:confirmed, charge:failed, charge:pending, charge:delayed, and charge:resolved.
- [Commerce Layer Webhooks](/webhooks/skills/commercelayer-webhooks.md): Receive and verify Commerce Layer webhooks. Use when setting up Commerce Layer webhook handlers, debugging X-CommerceLayer-Signature verification, or handling commerce events like orders.place, orders.approve, orders.pay, or shipments.ship.
- [Community Webhooks](/webhooks/skills/community-webhooks.md): Receive and verify Community (community.com) SMS platform webhooks. Use when setting up a Community webhook handler, debugging `community-signature` HMAC-SHA256 verification, or handling message.inbound, message.outbound, member.created, member.updated, and member.deleted events.
- [Courier Webhooks](/webhooks/skills/courier-webhooks.md): Receive and verify Courier outbound webhooks. Use when setting up Courier webhook handlers, debugging courier-signature verification, or handling notification and audience events like message:updated, notification:submitted, or audiences:updated.
- [Cronofy Webhooks (Push Notifications)](/webhooks/skills/cronofy-webhooks.md): Receive and verify Cronofy push notifications (webhooks). Use when setting up Cronofy notification channels, debugging Cronofy-HMAC-SHA256 verification, or handling Cronofy calendar events like verification, change, profile_disconnected, conferencing_profile_disconnected, profile_initial_sync_completed, and gdpr_requested. Cronofy signs the raw body with your application's client secret and sends a COMMA-SEPARATED list of base64 HMACs in the Cronofy-HMAC-SHA256 header.
- [Cursor Webhooks](/webhooks/skills/cursor-webhooks.md): Receive and verify Cursor Cloud Agent webhooks. Use when setting up Cursor webhook handlers, debugging signature verification, or handling Cloud Agent status change events (ERROR, FINISHED).
- [Customer.io Webhooks](/webhooks/skills/customerio-webhooks.md): Receive and verify Customer.io Reporting Webhooks. Use when setting up Customer.io webhook handlers, debugging X-CIO-Signature verification, or handling messaging events like email delivered, email opened, email clicked, email bounced, sms sent, push delivered, or customer unsubscribed.
- [Deepgram Webhooks](/webhooks/skills/deepgram-webhooks.md): Receive and verify Deepgram webhooks (callbacks). Use when setting up Deepgram webhook handlers, processing transcription callbacks, or handling asynchronous transcription results.
- [Discord Webhooks](/webhooks/skills/discord-webhooks.md): Receive and verify Discord webhook events. Use when setting up Discord webhook handlers, debugging Ed25519 signature verification, handling PING endpoint validation, or processing events like APPLICATION_AUTHORIZED, ENTITLEMENT_CREATE, or LOBBY_MESSAGE_CREATE.
- [Docker Hub Webhooks](/webhooks/skills/docker-hub-webhooks.md): Receive Docker Hub repository webhooks. Use when building a Docker Hub push webhook receiver, because Docker Hub webhooks are UNSIGNED — there is no signature header, no shared secret, no HMAC, no timestamp and no auth option, so signature verification is impossible and must be replaced with a secret URL token plus a re-check against the Docker Hub API. Use when parsing the push_data.tag / push_data.pusher / repository.repo_name payload, when handling the dhi_metadata object on mirrored Docker Hardened Image repositories, when asking why there is no event type field to switch on, or when wondering what to do about the legacy callback_url field.
- [DocuSign Webhooks](/webhooks/skills/docusign-webhooks.md): Receive and verify DocuSign Connect webhooks. Use when setting up DocuSign webhook handlers, debugging HMAC signature verification of the X-DocuSign-Signature-1 header, or handling eSignature events like envelope-sent, envelope-completed, and recipient-completed.
- [eBay Webhooks](/webhooks/skills/ebay-webhooks.md): Receive and verify eBay Notification API webhooks (Platform Notifications / Event Notifications). Use when setting up an eBay webhook endpoint, passing the endpoint challenge validation, debugging the x-ebay-signature ECDSA verification, fetching the public key with getPublicKey, or handling events like MARKETPLACE_ACCOUNT_DELETION.
- [ElevenLabs Webhooks](/webhooks/skills/elevenlabs-webhooks.md): Receive and verify ElevenLabs webhooks. Use when setting up ElevenLabs webhook handlers, debugging signature verification, or handling call transcription events.
- [Enode Webhooks](/webhooks/skills/enode-webhooks.md): Receive and verify Enode webhooks. Use when setting up Enode webhook handlers, debugging signature verification, or handling EV and energy events like user:vehicle:updated, user:charger:updated, or user:battery:updated.
- [Ethoca Webhooks](/webhooks/skills/ethoca-webhooks.md): Receive and verify Ethoca (Mastercard) Alerts webhooks. Use when setting up an Ethoca Alerts Push API receiver, securing the endpoint (mTLS, with optional onboarding-agreed HTTP Basic Auth; no HMAC signature), or handling fraud and dispute alert notifications.
- [Exact Online Webhooks](/webhooks/skills/exact-online-webhooks.md): Receive and verify Exact Online webhooks. Use when setting up Exact Online webhook handlers, debugging HashCode signature verification, subscribing to topics via the WebhookSubscriptions REST endpoint, or handling entity change events like Accounts, Items, StockPositions, FinancialTransactions, GoodsDeliveries, and Contacts. Note: Exact does NOT use Standard Webhooks — the signature is a HashCode field inside the JSON body (HMAC-SHA256 over the Content node, hex, uppercased), not an HTTP header.
- [Facebook Webhooks](/webhooks/skills/facebook-webhooks.md): Receive and verify Facebook (Meta Graph API) webhooks. Use when setting up Facebook webhook handlers, completing the GET verification handshake, debugging X-Hub-Signature-256 signature verification, or handling Page, Instagram, and Messenger events like feed, mention, comments, and messages.
- [FastSpring Webhooks](/webhooks/skills/fastspring-webhooks.md): Receive and verify FastSpring webhooks. Use when setting up FastSpring webhook handlers, debugging X-FS-Signature verification, or handling ecommerce events like order.completed, subscription.activated, subscription.charge.completed, and subscription.canceled.
- [Faundit Webhooks](/webhooks/skills/faundit-webhooks.md): Receive and verify Faundit webhooks. Use when setting up Faundit lost-and-found / returns webhook handlers, debugging signature verification, or handling the item-status and request-status events (statuses like delivered, finished, expired).
- [Favro Webhooks](/webhooks/skills/favro-webhooks.md): Receive and verify Favro webhooks. Use when setting up Favro webhook handlers, debugging X-Favro-Webhook signature verification, accepting the setup ping, or handling card events (card.created, card.committed, card.moved, card.updated, card.deleted) and comment events (comment.created, comment.updated, comment.deleted). Note: Favro does NOT use Standard Webhooks — the signature is base64(HMAC-SHA1(secret, payloadId + the URL you registered)), signed over the payloadId concatenated with the target URL, NOT the raw request body.
- [Fireblocks Webhooks](/webhooks/skills/fireblocks-webhooks.md): Receive and verify Fireblocks webhooks. Use when setting up Fireblocks webhook handlers, debugging Fireblocks-Webhook-Signature verification (detached JWS / RS512 / JWKS), or handling digital-asset events like transaction.created, transaction.status.updated, or transaction.approval_status.updated.
- [Fireflies Webhooks](/webhooks/skills/fireflies-webhooks.md): Receive and verify Fireflies.ai webhooks. Use when setting up Fireflies webhook handlers, debugging X-Hub-Signature verification, or handling the meeting.transcribed, meeting.summarized, and meeting.bot_joined events from Webhooks V2. Also covers the legacy V1 scheme.
- [Flexport Webhooks](/webhooks/skills/flexport-webhooks.md): Receive and verify Flexport webhooks. Use when setting up Flexport webhook handlers, debugging X-Hub-Signature-256 signature verification, or handling freight and logistics milestone events like /shipment#created and /shipment_leg#departed.
- [Formstack Webhooks](/webhooks/skills/formstack-webhooks.md): Receive and verify Formstack Forms webhooks (the "WebHook" submit action, aka "Send Data to an External URL"). Use when setting up a Formstack form submission webhook handler, debugging X-FS-Signature HMAC verification, handling application/x-www-form-urlencoded or JSON submission payloads, or working out which fields a form will POST. Formstack has NO event types — a WebHook fires on exactly one thing, a form submission — so handlers key off FormID, not an event name.
- [Front Webhooks](/webhooks/skills/frontapp-webhooks.md): Receive and verify Front (Frontapp) application webhooks. Use when setting up Front webhook handlers, debugging X-Front-Signature verification, handling the X-Front-Challenge subscription validation, or processing Front events like inbound_received, outbound_sent, conversation_moved, assignee_changed, tag_added, and new_comment_added.
- [FusionAuth Webhooks](/webhooks/skills/fusionauth-webhooks.md): Receive and verify FusionAuth webhooks. Use when setting up FusionAuth webhook handlers, debugging JWT signature verification, or handling authentication events like user.create, user.login.success, user.registration.create, or user.delete.
- [Gemini Webhooks](/webhooks/skills/gemini-webhooks.md): Receive and verify Google Gemini API webhooks. Use when setting up Gemini webhook handlers for batch jobs, video generation, or Interactions API function-calling LROs, debugging signature verification, or handling events like batch.succeeded, batch.failed, video.generated, or interaction.completed.
- [GitHub Webhooks](/webhooks/skills/github-webhooks.md): Receive and verify GitHub webhooks. Use when setting up GitHub webhook handlers, debugging signature verification, or handling repository events like push, pull_request, issues, or release.
- [GitLab Webhooks](/webhooks/skills/gitlab-webhooks.md): Receive and verify GitLab webhooks. Use when setting up GitLab webhook handlers, debugging signature or token verification, or handling repository events like push, merge_request, issue, pipeline, or release.
- [GoCardless Webhooks](/webhooks/skills/gocardless-webhooks.md): Receive and verify GoCardless webhooks. Use when setting up GoCardless webhook handlers, debugging Webhook-Signature verification, or handling bank debit events like payments confirmed, payments failed, mandates cancelled, and payouts paid.
- [Google Cloud Pub/Sub Webhooks (Push Subscriptions)](/webhooks/skills/google-pubsub-webhooks.md): Receive and verify Google Cloud Pub/Sub push subscription webhooks. Use when setting up a Pub/Sub push endpoint, verifying the OIDC `Authorization: Bearer` JWT that Pub/Sub attaches to authenticated push subscriptions (iss, aud, email, email_verified), parsing the push envelope (`message.data` base64, `message.attributes`, `messageId`, `publishTime`, `subscription`), securing an unauthenticated push endpoint, or debugging redelivery and ack deadline issues.
- [Grafana Webhooks](/webhooks/skills/grafana-webhooks.md): Receive and verify Grafana Alerting webhook contact point notifications. Use when setting up a Grafana webhook receiver, debugging Grafana HMAC signature verification (X-Grafana-Alerting-Signature, HMAC-SHA256 hex over the raw body, optionally timestamp + ":" + body), or handling firing and resolved alert notifications from Grafana-managed alerting or Grafana Cloud.
- [Green Dot Webhooks](/webhooks/skills/greendot-webhooks.md): Receive and authenticate Green Dot Embedded Finance (BaaS) webhooks. Use when setting up a Green Dot partner webhook endpoint, validating the OAuth client_credentials Bearer token (scope post:webhook), handling the optional undocumented x-gd-signature header, echoing the x-GD-RequestId header, returning the responseDetails acknowledgement, or handling eventType events like transaction, accountUpdated, achTransfer, cardUpdate, billPayTransfer, directDepositSwitch, and provisioning.
- [Hookdeck Event Gateway](/webhooks/skills/hookdeck-event-gateway.md): Hookdeck Event Gateway — webhook infrastructure that replaces your queue. Use when receiving webhooks and need guaranteed delivery, automatic retries, replay, rate limiting, filtering, or observability. Eliminates the need for your own message queue for webhook processing.
- [Hookdeck Event Gateway Webhooks](/webhooks/skills/hookdeck-event-gateway-webhooks.md): Verify and handle webhooks delivered through the Hookdeck Event Gateway. Use when receiving webhooks via Hookdeck and need to verify the x-hookdeck-signature header. Covers signature verification for Express, Next.js, and FastAPI.
- [Hookdeck Outpost](/webhooks/skills/outpost.md): Hookdeck Outpost — open-source infrastructure for sending webhooks and events to user-preferred destinations (HTTP, SQS, RabbitMQ, Pub/Sub, EventBridge, Kafka). Use when building a SaaS platform that needs to deliver events to customers.
- [HubSpot Webhooks](/webhooks/skills/hubspot-webhooks.md): Receive and verify HubSpot webhooks. Use when setting up HubSpot webhook handlers, debugging X-HubSpot-Signature-v3 signature verification, or handling CRM events like contact.creation, contact.propertyChange, or deal.creation.
- [Hugging Face Webhooks](/webhooks/skills/huggingface-webhooks.md): Receive and verify Hugging Face webhooks. Use when setting up Hugging Face webhook handlers, debugging X-Webhook-Secret verification, or handling events on models, datasets, and Spaces — repo updates, new commits and tags (repo.content), config changes (repo.config), discussions, Pull Requests, and discussion comments.
- [Intercom Webhooks](/webhooks/skills/intercom-webhooks.md): Receive and verify Intercom webhooks. Use when setting up Intercom webhook handlers, debugging X-Hub-Signature verification, or handling customer messaging events like conversation.user.created, conversation.admin.replied, contact.user.created, or ticket.created.
- [Jira Webhooks](/webhooks/skills/jira-webhooks.md): Receive and verify Jira Cloud webhooks. Use when setting up Jira webhook handlers, debugging signature verification, or handling issue and comment events like jira:issue_created, jira:issue_updated, jira:issue_deleted, comment_created, or comment_updated.
- [Klaviyo Webhooks](/webhooks/skills/klaviyo-webhooks.md): Receive and verify Klaviyo webhooks. Use when setting up Klaviyo webhook handlers, debugging Klaviyo-Signature verification, or handling Klaviyo system webhook events like event:klaviyo.opened_email, event:klaviyo.clicked_email, event:klaviyo.received_sms, or event:klaviyo.unsubscribed_from_email_marketing.
- [Knock Webhooks](/webhooks/skills/knock-webhooks.md): Receive and verify Knock outbound webhooks. Use when setting up Knock webhook handlers, debugging x-knock-signature verification, or handling notification events like message.sent, message.delivered, message.bounced, message.read, workflow.committed, or message.link_clicked.
- [Linear Webhooks](/webhooks/skills/linear-webhooks.md): Receive and verify Linear webhooks. Use when setting up Linear webhook handlers, debugging Linear signature verification, or handling Linear issue tracking events like Issue, Comment, Project, Cycle, IssueLabel, and IssueSLA create/update/remove actions.
- [LinkedIn Webhooks](/webhooks/skills/linkedin-webhooks.md): Receive and verify LinkedIn webhooks. Use when setting up LinkedIn webhook handlers, completing the challengeCode endpoint validation, debugging X-LI-Signature verification, or handling LEAD_ACTION (Lead Sync) and ORGANIZATION_SOCIAL_ACTION_NOTIFICATIONS (Community Management) events.
- [Lithic Webhooks](/webhooks/skills/lithic-webhooks.md): Receive and verify Lithic webhooks. Use when setting up Lithic event subscriptions, debugging Standard Webhooks signature verification, or handling card and money-movement events like card.created, card_transaction.updated, payment_transaction.created, and dispute.updated.
- [Mailchimp Webhooks](/webhooks/skills/mailchimp-webhooks.md): Receive and secure Mailchimp webhooks. Use when setting up Mailchimp webhook handlers, responding to Mailchimp's GET URL validation, securing the endpoint with a URL secret, or handling audience events like subscribe, unsubscribe, profile, upemail, cleaned, and campaign.
- [MailerSend Webhooks](/webhooks/skills/mailersend-webhooks.md): Receive and verify MailerSend webhooks. Use when setting up MailerSend webhook handlers, debugging MailerSend signature verification with the `Signature` header (HMAC-SHA256 hex over the raw body), handling the `webhook.test` URL validation ping, or handling MailerSend activity events like activity.sent, activity.delivered, activity.hard_bounced, activity.opened, activity.clicked and activity.spam_complaint. Also covers MailerSend SMS webhooks (sms.sent, sms.delivered, sms.failed). MailerSend is the transactional email/SMS API — not MailerLite, Mailgun, Mailchimp or Resend.
- [Mailgun Webhooks](/webhooks/skills/mailgun-webhooks.md): Receive and verify Mailgun webhooks. Use when setting up Mailgun webhook handlers, debugging Mailgun signature verification, or handling email events like delivered, failed, opened, clicked, unsubscribed, and complained.
- [Microsoft Graph Webhooks](/webhooks/skills/microsoft-graph-webhooks.md): Receive and verify Microsoft Graph change notifications (webhooks). Use when setting up a Microsoft Graph webhook / subscription handler, completing the validationToken endpoint validation handshake, validating clientState, decrypting rich notifications (includeResourceData), handling lifecycle events (reauthorizationRequired, subscriptionRemoved, missed), or processing created/updated/deleted change notifications for Outlook mail, Teams messages, OneDrive/SharePoint driveItems, users, and groups.
- [Microsoft SharePoint Webhooks](/webhooks/skills/microsoft-sharepoint-webhooks.md): Receive and verify Microsoft SharePoint webhooks. Use when setting up SharePoint list/document-library webhook handlers, completing the validationtoken handshake, validating clientState, or reacting to list-item changes like ItemAdded/ItemUpdated by calling the GetChanges API.
- [Mollie Webhooks](/webhooks/skills/mollie-webhooks.md): Receive and handle Mollie webhooks. Use when setting up Mollie webhook handlers, verifying the X-Mollie-Signature header on next-gen webhooks, or handling payment status changes like paid, expired, failed, canceled, or authorized. Covers both systems: classic webhooks (unsigned, id-only, confirm by fetching the payment from the API) and next-gen webhooks (signed JSON events, HMAC-SHA256 of the raw body).
- [monday.com Webhooks](/webhooks/skills/monday-webhooks.md): Receive and verify monday.com webhooks. Use when setting up monday.com webhook handlers, implementing the challenge handshake, debugging JWT verification, or handling board events like create_item, change_column_value, change_status_column_value, create_update, or create_subitem.
- [Neon Webhooks](/webhooks/skills/neon-webhooks.md): Receive and verify Neon Auth webhooks. Use when setting up Neon webhook handlers, debugging Ed25519 / detached JWS signature verification, or handling Neon Auth events like user.created, user.before_create, send.otp, send.magic_link, or phone_number.verified.
- [NMI Webhooks](/webhooks/skills/nmi-webhooks.md): Receive and verify NMI (Network Merchants) webhooks. Use when setting up NMI webhook handlers, debugging Webhook-Signature verification, or handling transaction events like transaction.sale.success, transaction.auth.success, transaction.refund.success, and transaction.void.success. Note: NMI does NOT use Standard Webhooks — the Webhook-Signature header is "t=<nonce>,s=<sig>" (comma-separated) where t is a NONCE (not a Unix timestamp), and the signature is HMAC-SHA256 over "<nonce>.<raw_body>", lowercase hex.
- [Notion Webhooks](/webhooks/skills/notion-webhooks.md): Receive and verify Notion webhooks. Use when setting up Notion webhook handlers, debugging Notion signature verification, completing the verification_token handshake, or handling workspace events like page.content_updated, page.properties_updated, comment.created, or data_source.schema_updated.
- [Nuvemshop (Tiendanube) Webhooks](/webhooks/skills/nuvemshop-webhooks.md): Receive and verify Nuvemshop (Tiendanube) webhooks. Use when setting up Nuvemshop webhook handlers, debugging x-linkedstore-hmac-sha256 signature verification, or handling store events like order/created, order/paid, order/cancelled, product/updated, or app/uninstalled.
- [Nylas Webhooks](/webhooks/skills/nylas-webhooks.md): Receive and verify Nylas webhooks. Use when setting up Nylas webhook handlers, debugging x-nylas-signature verification, completing the challenge handshake, or handling email and calendar events like message.created, message.opened, event.created, event.updated, or grant.expired.
- [Okta Webhooks](/webhooks/skills/okta-webhooks.md): Receive and verify Okta Event Hooks. Use when setting up Okta event hook handlers, implementing the one-time verification challenge, authenticating requests with the Authorization header secret, or handling identity events like user.lifecycle.create, user.session.start, user.account.lock, or group.user_membership.add.
- [OpenAI Webhooks](/webhooks/skills/openai-webhooks.md): Receive and verify OpenAI webhooks. Use when setting up OpenAI webhook handlers for fine-tuning jobs, batch completions, or async events like fine_tuning.job.completed, batch.completed, or realtime.call.incoming.
- [OpenClaw Webhooks](/webhooks/skills/openclaw-webhooks.md): Receive and verify OpenClaw Gateway webhooks. Use when handling webhook events from OpenClaw AI agents, processing agent hook calls, wake events, or building integrations that respond to OpenClaw agent activity.
- [Orb Webhooks](/webhooks/skills/orb-webhooks.md): Receive and verify Orb webhooks. Use when setting up Orb webhook handlers, debugging Orb signature verification, or handling usage-based billing events like invoice.issued, subscription.created, or customer.credit_balance_dropped.
- [Ordinal Webhooks](/webhooks/skills/ordinal-webhooks.md): Receive Ordinal (tryordinal.com) webhooks — the social-media / LinkedIn content planning, approval and scheduling platform for marketing teams. Use when building an Ordinal webhook receiver, because Ordinal does NOT sign its deliveries: there is no HMAC, no signature header, no signing secret and no timestamp, so do not write a signature verifier. The only authentication is a STATIC custom header you configure yourself via the webhook's `headers` field (e.g. `X-Webhook-Secret`), compared in constant time. Use when handling `post.published`, `post.publish_failed`, `post.created`, `post.approval.requested`, `post.comment.created`, `social_profile.reconnect_needed` or `invite.accepted`, unwrapping the `{ type, data, createdAt }` envelope, or managing webhooks via `POST /api/v1/webhooks`. Not Bitcoin Ordinals/inscriptions, not Ordinal Labs.
- [Oura Webhooks](/webhooks/skills/oura-webhooks.md): Receive and verify Oura webhooks. Use when setting up Oura Ring webhook handlers, completing the subscription verification handshake, debugging x-oura-signature verification, or handling data events like sleep, daily_readiness, daily_activity, and workout.
- [Paddle Webhooks](/webhooks/skills/paddle-webhooks.md): Receive and verify Paddle webhooks. Use when setting up Paddle webhook handlers, debugging signature verification, or handling subscription events like subscription.created, subscription.canceled, or transaction.completed.
- [Paymob Webhooks](/webhooks/skills/paymob-webhooks.md): Receive and verify Paymob webhook callbacks (transaction callbacks). Use when setting up Paymob webhook handlers, debugging HMAC-SHA512 signature verification, or handling payment transaction states like success, refund, void, and auth/capture from the Transaction Processed Callback.
- [PayPal Webhooks](/webhooks/skills/paypal-webhooks.md): Receive and verify PayPal webhooks. Use when setting up PayPal webhook handlers, debugging certificate-based signature verification, or handling payment events like PAYMENT.CAPTURE.COMPLETED, PAYMENT.SALE.COMPLETED, BILLING.SUBSCRIPTION.CREATED, or CHECKOUT.ORDER.APPROVED.
- [PayPro Global Webhooks (IPN)](/webhooks/skills/paypro-global-webhooks.md): Receive and verify PayPro Global IPN (Instant Payment Notification) webhooks. Use when setting up a PayPro Global IPN handler, debugging the SIGNATURE (SHA256) or HASH (MD5) verification, or handling order and subscription events like OrderCharged, OrderRefunded, and SubscriptionChargeSucceed. Payloads are form-encoded (application/x-www-form-urlencoded), not JSON.
- [Paystack Webhooks](/webhooks/skills/paystack-webhooks.md): Receive and verify Paystack webhooks. Use when setting up Paystack webhook handlers, debugging x-paystack-signature verification, or handling payment events like charge.success, transfer.success, transfer.failed, refund.processed, subscription.create, or invoice.payment_failed.
- [Persona Webhooks](/webhooks/skills/persona-webhooks.md): Receive and verify Persona webhooks. Use when setting up Persona webhook handlers, debugging Persona-Signature verification, or handling identity verification events like inquiry.completed, inquiry.approved, verification.passed, account.created, or case.resolved.
- [Picqer Webhooks](/webhooks/skills/picqer-webhooks.md): Receive and verify Picqer webhooks. Use when setting up Picqer webhook handlers, debugging X-Picqer-Signature verification, or handling warehouse and order events like orders.completed, picklists.closed, or products.stock_changed.
- [Pipedrive Webhooks](/webhooks/skills/pipedrive-webhooks.md): Receive and authenticate Pipedrive webhooks. Use when setting up Pipedrive webhook handlers, debugging HTTP Basic Auth verification, or handling CRM events like create.deal, change.person, or delete.activity.
- [Polar Webhooks](/webhooks/skills/polar-webhooks.md): Receive and verify Polar webhooks. Use when setting up Polar webhook handlers, debugging Standard Webhooks signature verification, or handling billing events like order.paid, subscription.created, subscription.canceled, or checkout.updated.
- [Postmark Webhooks](/webhooks/skills/postmark-webhooks.md): Receive and process Postmark webhooks. Use when setting up Postmark webhook handlers, handling email delivery events, processing bounces, opens, clicks, spam complaints, or subscription changes.
- [Praxis Webhooks](/webhooks/skills/praxis-webhooks.md): Receive and verify Praxis (Praxis Tech / Cashier payment orchestration) webhooks. Use when setting up a Praxis webhook endpoint, verifying the gt-authentication SHA-384 signature, signing the acknowledgement with the external-request-signature header, or handling Payment Notification (transaction_status pending, approved, rejected, error) and Subscription Notification events.
- [Pylon Webhooks](/webhooks/skills/pylon-webhooks.md): Receive and verify Pylon webhooks. Use when setting up Pylon webhook handlers, debugging Pylon signature verification (Pylon-Webhook-Signature, hs256= HMAC-SHA256 over timestamp.body), or handling B2B support events such as issue lifecycle changes (Pylon's event-type catalog is not public — confirm the exact names in your own destination configuration).
- [Quo Webhooks](/webhooks/skills/quo-webhooks.md): Receive and verify Quo webhooks (quo.com — the business phone / VoIP platform formerly known as OpenPhone). Use when setting up a Quo webhook handler, debugging signature verification, or handling call and message events like message.received, call.completed, call.summary.completed, call.transcript.completed, contact.updated or task.created. Quo has TWO signature schemes: the current versioned API (Quo-Api-Version 2026-03-30) uses Standard Webhooks / Svix-style webhook-id + webhook-timestamp + webhook-signature headers, while the legacy v1 API still sends the OpenPhone-era openphone-signature header (hmac;1;timestamp;signature). Not Quoter (CPQ, MD5 `hash` form field), not Quora, not Twilio.
- [Quoter Webhooks](/webhooks/skills/quoter-webhooks.md): Receive and verify Quoter webhooks. Use when setting up Quoter webhook handlers, debugging the MD5 hash verification, or handling Quote, Person, and Payment create/update events posted as x-www-form-urlencoded.
- [Razorpay Webhooks](/webhooks/skills/razorpay-webhooks.md): Receive and verify Razorpay webhooks. Use when setting up Razorpay webhook handlers, debugging X-Razorpay-Signature verification, or handling payment events like payment.captured, payment.failed, order.paid, refund.processed, or subscription.charged.
- [Recharge Webhooks](/webhooks/skills/recharge-webhooks.md): Receive and verify Recharge (subscription commerce) webhooks. Use when setting up Recharge webhook handlers, debugging X-Recharge-Webhook-Signature or legacy X-Recharge-Hmac-Sha256 signature verification, or handling subscription events like charge/paid, charge/failed, subscription/created, subscription/cancelled, and order/created.
- [Recurly Webhooks](/webhooks/skills/recurly-webhooks.md): Receive and verify Recurly webhooks. Use when setting up Recurly webhook handlers, verifying the recurly-signature header (HMAC-SHA256), securing the endpoint with HTTP Basic Auth, or handling subscription and billing events like new_subscription_notification, updated_subscription_notification, successful_payment_notification, and failed_payment_notification.
- [Replicate Webhooks](/webhooks/skills/replicate-webhooks.md): Receive and verify Replicate webhooks. Use when setting up Replicate webhook handlers, debugging signature verification, or handling prediction events like start, output, logs, or completed.
- [Resend Webhooks](/webhooks/skills/resend-webhooks.md): Receive and verify Resend webhooks. Use when setting up Resend webhook handlers, debugging signature verification, handling email events like email.sent, email.delivered, email.bounced, or processing inbound emails.
- [Retell AI Webhooks](/webhooks/skills/retell-webhooks.md): Receive and verify Retell AI webhooks. Use when setting up Retell webhook handlers, debugging X-Retell-Signature verification, or handling voice call events like call_started, call_ended, call_analyzed, and transcript_updated.
- [Revolut Webhooks](/webhooks/skills/revolut-webhooks.md): Receive and verify Revolut Merchant webhooks. Use when setting up Revolut webhook handlers, debugging Revolut-Signature verification, or handling order and payment events like ORDER_COMPLETED, ORDER_AUTHORISED, or ORDER_PAYMENT_DECLINED.
- [RingCentral Webhooks](/webhooks/skills/ringcentral-webhooks.md): Receive and verify RingCentral webhooks. Use when setting up RingCentral webhook subscriptions, completing the Validation-Token handshake, checking the Verification-Token header, or handling message-store, presence, and telephony session events.
- [Salesforce Webhooks (Outbound Messages)](/webhooks/skills/salesforce-webhooks.md): Receive and verify Salesforce Outbound Messages (the native "webhook" for Flow/Workflow). Use when setting up a Salesforce Outbound Message listener, parsing the SOAP/XML notification, validating the OrganizationId, returning the required Ack response, or handling Account, Contact, Lead, Opportunity, and Case record changes. Also covers Platform Events / Change Data Capture as the streaming alternative.
- [Sanity Webhooks](/webhooks/skills/sanity-webhooks.md): Receive and verify Sanity GROQ-powered webhooks. Use when setting up Sanity webhook handlers, debugging signature verification with the sanity-webhook-signature header, or handling Content Lake document create/update/delete events for cache revalidation and search reindexing.
- [Scrapfly Webhooks](/webhooks/skills/scrapfly-webhooks.md): Receive and verify Scrapfly webhooks. Use when setting up Scrapfly webhook handlers for async scrape, extraction, screenshot, or crawler jobs, debugging X-Scrapfly-Webhook-Signature verification, or routing on X-Scrapfly-Webhook-Resource-Type.
- [SendGrid Webhooks](/webhooks/skills/sendgrid-webhooks.md): Receive and verify SendGrid webhooks. Use when setting up SendGrid webhook handlers, debugging signature verification, or handling email delivery events.
- [ShipBob Webhooks](/webhooks/skills/shipbob-webhooks.md): Receive and verify ShipBob webhooks. Use when setting up ShipBob webhook handlers, debugging signature verification, or handling fulfillment events like order.shipped, order.shipment.delivered, order.shipment.tracking.updated, return.created, wro.created, or billing.charge.created.
- [ShipHero Webhooks](/webhooks/skills/shiphero-webhooks.md): Receive and verify ShipHero webhooks. Use when setting up ShipHero webhook handlers, debugging signature verification (x-shiphero-hmac-sha256), or handling fulfillment events like Order Allocated, Shipment Update, Inventory Update, Order Canceled, and Return Update.
- [ShipStation Webhooks](/webhooks/skills/shipstation-webhooks.md): Receive and verify ShipStation webhooks. Use when setting up ShipStation webhook handlers, securing endpoints that have no signature (secret token in the URL), fetching the thin resource_url payload with Basic auth, or handling ORDER_NOTIFY, ITEM_ORDER_NOTIFY, SHIP_NOTIFY, ITEM_SHIP_NOTIFY, FULFILLMENT_SHIPPED, and FULFILLMENT_REJECTED events.
- [Shopify Webhooks](/webhooks/skills/shopify-webhooks.md): Receive and verify Shopify webhooks. Use when setting up Shopify webhook handlers, debugging signature verification, or handling store events like orders/create, products/update, or customers/create.
- [SHOPLINE Webhooks](/webhooks/skills/shopline-webhooks.md): Receive and verify SHOPLINE webhooks. Use when setting up SHOPLINE webhook handlers, debugging X-Shopline-Hmac-Sha256 signature verification, or handling store events like orders/create, products/update, or collect/delete.
- [Slack Webhooks](/webhooks/skills/slack-webhooks.md): Receive and verify Slack Events API webhooks. Use when setting up Slack webhook handlers, debugging Slack signature verification, handling the url_verification challenge, or processing events like app_mention, message, reaction_added, team_join, or app_home_opened.
- [Smartcar Webhooks](/webhooks/skills/smartcar-webhooks.md): Receive and verify Smartcar webhooks. Use when setting up Smartcar webhook handlers, debugging SC-Signature verification, responding to the VERIFY challenge, or handling vehicle events like VEHICLE_STATE and VEHICLE_ERROR.
- [Smile API Webhooks](/webhooks/skills/smile-webhooks.md): Receive and verify Smile API (getsmileapi.com) webhooks. Use when setting up a Smile webhook endpoint, verifying the Smile-Signature header (HMAC-SHA512 hex over the raw body), debugging Smile signature verification failures, or handling employment/income data events like ACCOUNT_CONNECTED, TASK_FINISHED, INCOMES_ADDED, EMPLOYMENTS_ADDED, IDENTITY_ADDED, and RECORD_COMPLETED. This is Smile API for Southeast Asian employment/income data — NOT Smile.io loyalty and NOT Smile Identity KYC.
- [Snipcart Webhooks](/webhooks/skills/snipcart-webhooks.md): Receive and verify Snipcart webhooks (snipcart.com, the HTML/JS embeddable shopping cart). Use when setting up a Snipcart webhook handler, debugging the X-Snipcart-RequestToken callback validation, or handling events like order.completed, order.status.changed, order.paymentStatus.changed, order.refund.created, v3/subscription.invoice.payment.succeeded, or the synchronous shippingrates.fetch and taxes.calculate webhooks. Snipcart does NOT sign payloads — there is no HMAC and no signature header; authenticity is proved by calling Snipcart's request-validation API with your secret API key.
- [Solidgate Webhooks](/webhooks/skills/solidgate-webhooks.md): Receive and verify Solidgate webhooks. Use when setting up Solidgate webhook handlers, debugging signature verification with the merchant and signature headers, or handling payment events like card_gate.order.updated, card_gate.chargeback.received, subscription.updated.v2, or alt_gate.order.updated.
- [SparkPost Webhooks](/webhooks/skills/sparkpost-webhooks.md): Receive and authenticate SparkPost event webhooks. Use when setting up SparkPost webhook handlers, debugging SparkPost webhook authentication (Basic Auth, OAuth 2.0 Bearer tokens, or the deprecated X-MessageSystems-Webhook-Token header), parsing the batched `msys` payload, or handling email events like delivery, bounce, click, open, spam_complaint, delay, and list_unsubscribe. SparkPost event webhooks are NOT signed — there is no HMAC and no signature header.
- [Square Webhooks](/webhooks/skills/square-webhooks.md): Receive and verify Square webhooks. Use when setting up Square webhook handlers, debugging Square signature verification, or handling payment and commerce events like payment.created, payment.updated, refund.created, invoice.payment_made, or order.updated.
- [Statsig Webhooks](/webhooks/skills/statsig-webhooks.md): Receive and verify Statsig Event Webhook (Generic Webhook) requests. Use when setting up a Statsig webhook handler, debugging Statsig signature verification, or processing exposure events and config-change notifications (feature gates, experiments, dynamic configs).
- [Strava Webhooks](/webhooks/skills/strava-webhooks.md): Receive and verify Strava webhooks (Webhook Events API). Use when setting up Strava push subscriptions, implementing the GET subscription validation handshake, debugging the hub.challenge / hub.verify_token exchange, or handling activity and athlete events like activity create, activity update, activity delete, and athlete deauthorization.
- [Stripe Webhooks](/webhooks/skills/stripe-webhooks.md): Receive and verify Stripe webhooks. Use when setting up Stripe webhook handlers, debugging signature verification, or handling payment events like payment_intent.succeeded, customer.subscription.created, or invoice.paid.
- [Supabase Webhooks](/webhooks/skills/supabase-webhooks.md): Receive and verify Supabase webhooks. Use when setting up Supabase Database Webhooks (INSERT, UPDATE, DELETE table events sent via pg_net triggers) or Supabase Auth Hooks (send_email, send_sms, custom_access_token, before_user_created, mfa_verification_attempt, password_verification_attempt), debugging Standard Webhooks signature verification with the webhook-id, webhook-timestamp and webhook-signature headers, or handling the `v1,whsec_` secret format.
- [Svix Webhooks](/webhooks/skills/svix-webhooks.md): Receive and verify Svix webhooks (the Standard Webhooks scheme used by many providers). Use when setting up a Svix webhook handler, debugging svix-id / svix-timestamp / svix-signature verification, handling secret rotation with multiple signatures, or parsing the {"type": "...", "data": {...}} envelope for events like invoice.paid, user.created, or message.sent.
- [Synctera Webhooks](/webhooks/skills/synctera-webhooks.md): Receive and verify Synctera webhooks. Use when setting up Synctera webhook handlers, debugging Synctera-Signature verification, or handling banking events like ACCOUNT.UPDATED or TRANSACTIONS.POSTED.CREATED.
- [Tally Webhooks](/webhooks/skills/tally-webhooks.md): Receive and verify Tally webhooks. Use when setting up Tally form webhook handlers, debugging Tally-Signature verification, or handling FORM_RESPONSE submission events and reading answers from data.fields.
- [Tebex Webhooks](/webhooks/skills/tebex-webhooks.md): Receive and verify Tebex webhooks. Use when setting up Tebex webhook handlers, debugging X-Signature verification, completing the validation.webhook handshake, or handling events like payment.completed, payment.refunded, and recurring-payment.renewed.
- [Telnyx Webhooks](/webhooks/skills/telnyx-webhooks.md): Receive and verify Telnyx webhooks. Use when setting up Telnyx webhook handlers, debugging Ed25519 signature verification with the telnyx-signature-ed25519 and telnyx-timestamp headers, or handling messaging events like message.received, message.sent, or message.finalized.
- [TikTok Shop Webhooks](/webhooks/skills/tiktok-shop-webhooks.md): Receive and verify TikTok Shop webhooks. Use when setting up TikTok Shop webhook handlers, debugging Authorization-header signature verification, or handling events like ORDER_STATUS_CHANGE, PACKAGE_UPDATE, RECIPIENT_ADDRESS_UPDATE, PRODUCT_STATUS_CHANGE, or SELLER_DEAUTHORIZATION.
- [TikTok Webhooks](/webhooks/skills/tiktok-webhooks.md): Receive and verify TikTok for Developers webhooks (Login Kit, Content Posting, Data Portability). Use when setting up TikTok webhook handlers, debugging TikTok-Signature verification, or handling events like authorization.removed, video.upload.failed, video.publish.completed, or portability.download.ready. Not for TikTok Shop — see tiktok-shop-webhooks.
- [Token.io Webhooks](/webhooks/skills/tokenio-webhooks.md): Receive and verify Token.io webhooks. Use when setting up Token.io webhook handlers, debugging Ed25519 signature verification, subscribing to webhook config via PUT /webhook/config, or handling open banking / A2A payment events like PAYMENT_STATUS_CHANGED, REFUND_STATUS_CHANGED, VRP_STATUS_CHANGED, and VIRTUAL_ACCOUNT_CREDIT_RECEIVED. Note: Token.io does NOT use HMAC or Standard Webhooks — it signs the raw body with an ASYMMETRIC Ed25519 signature in the token-signature header, verified with your member's Ed25519 public key.
- [Treezor Webhooks](/webhooks/skills/treezor-webhooks.md): Receive and verify Treezor webhooks. Use when setting up Treezor webhook handlers, debugging signature verification, or handling BaaS banking events like payin.create, payout.update, cardtransaction.create, wallet.create, or user.kycreview.
- [Trello Webhooks](/webhooks/skills/trello-webhooks.md): Receive and verify Trello webhooks. Use when setting up Trello webhook handlers, debugging x-trello-webhook signature verification, or handling board and card events like createCard, updateCard, commentCard, or addMemberToBoard.
- [Twilio Webhooks](/webhooks/skills/twilio-webhooks.md): Receive and verify Twilio webhooks. Use when setting up Twilio webhook handlers, debugging X-Twilio-Signature verification, or handling communications events like incoming SMS, voice calls, message status callbacks (delivered, failed), or recording status callbacks.
- [Twitch Webhooks](/webhooks/skills/twitch-webhooks.md): Receive and verify Twitch EventSub webhooks. Use when setting up Twitch webhook handlers, debugging signature verification, handling the webhook_callback_verification challenge, or handling EventSub events like stream.online, stream.offline, channel.follow, channel.subscribe, and channel.channel_points_custom_reward_redemption.add.
- [Twitter / X Webhooks](/webhooks/skills/twitter-webhooks.md): Receive and verify Twitter/X Account Activity API webhooks. Use when setting up X (Twitter) webhook handlers, debugging the x-twitter-webhooks-signature HMAC-SHA256 check, answering the CRC (Challenge-Response Check) crc_token request, or handling events like tweet_create_events, favorite_events, follow_events, and direct_message_events.
- [Typeform Webhooks](/webhooks/skills/typeform-webhooks.md): Receive and verify Typeform webhooks. Use when setting up Typeform webhook handlers, debugging Typeform-Signature verification, or handling form events like form_response and form_response_partial submissions.
- [Uber Webhooks](/webhooks/skills/uber-webhooks.md): Receive and verify Uber Eats webhooks. Use when setting up Uber webhook handlers, debugging X-Uber-Signature verification, or handling order events like orders.notification, orders.cancel, store.provisioned, or store.status.changed.
- [Upollo Webhooks](/webhooks/skills/upollo-webhooks.md): Receive and verify Upollo webhooks. Use when setting up Upollo webhook handlers, debugging Upollo-Signature verification (HMAC-SHA512), or reacting to fraud/risk flags like ACCOUNT_SHARING and MULTIPLE_ACCOUNTS when a user is flagged and an action (CHALLENGE, DENY, PERMIT) is returned.
- [USPS Webhooks](/webhooks/skills/usps-webhooks.md): Receive and verify USPS webhooks (Subscriptions - Tracking API v3.2). Use when setting up USPS tracking webhook handlers, debugging X-HMAC signature verification, creating tracking subscriptions, or handling package tracking events like Out for Delivery, Delivered, or Available for Pickup.
- [Utila Webhooks](/webhooks/skills/utila-webhooks.md): Receive and verify Utila webhooks. Use when setting up Utila webhook handlers, debugging x-utila-signature RSA/PSS verification, or handling Utila digital-asset events like TRANSACTION_CREATED, TRANSACTION_STATE_UPDATED, WALLET_CREATED, WALLET_ADDRESS_CREATED, and TRANSACTION_AML_SCREENING_RESULT_READY.
- [Vapi Webhooks](/webhooks/skills/vapi-webhooks.md): Receive and verify Vapi webhooks (the "Server URL"). Use when setting up a Vapi Server URL receiver, authenticating deliveries with a shared secret (Authorization: Bearer or the legacy X-Vapi-Secret header), or handling voice-agent server messages — including the four request/response types that REQUIRE a JSON body back (assistant-request, tool-calls, transfer-destination-request, knowledge-base-request) plus informational ones like status-update and end-of-call-report.
- [Vercel Log Drains Webhooks](/webhooks/skills/vercel-log-drains-webhooks.md): Receive and verify Vercel Log Drains deliveries. Use when setting up a Vercel log drain HTTP endpoint, debugging x-vercel-signature verification, handling the x-vercel-verify endpoint handshake, or processing batched log entries from sources like lambda, edge, build, static, external, firewall, and redirect.
- [Vercel Webhooks](/webhooks/skills/vercel-webhooks.md): Receive and verify Vercel webhooks. Use when setting up Vercel webhook handlers, debugging signature verification, or handling deployment events like deployment.created, deployment.succeeded, or project.created.
- [Walmart Webhooks](/webhooks/skills/walmart-webhooks.md): Receive and verify Walmart Marketplace performance webhooks. Use when setting up Walmart webhook handlers, debugging WM_SEC.SIGNATURE HMAC-SHA256 signature verification, or handling seller events like PO_CREATED, INVENTORY_OOS, BUY_BOX_CHANGED, and RETURN_CREATED.
- [Webflow Webhooks](/webhooks/skills/webflow-webhooks.md): Receive and verify Webflow webhooks. Use when setting up Webflow webhook handlers, debugging signature verification, or handling Webflow events like form_submission, site_publish, ecomm_new_order, or collection item changes.
- [Webhook Handler Patterns](/webhooks/skills/webhook-handler-patterns.md): Best practices for webhook handlers. Use when implementing the handler sequence (verify first, parse second, handle idempotently), idempotency, error handling, retry logic, or framework-specific issues with Express, Next.js, or FastAPI.
- [WeChat Pay Webhooks](/webhooks/skills/wechat-webhooks.md): Receive and verify WeChat Pay (APIv3) webhook notifications. Use when setting up WeChat Pay webhook handlers, debugging Wechatpay-Signature RSA-SHA256 verification, decrypting the AEAD_AES_256_GCM encrypted resource, or handling payment and refund events like TRANSACTION.SUCCESS, REFUND.SUCCESS, and REFUND.CLOSED.
- [WhatsApp Webhooks](/webhooks/skills/whatsapp-webhooks.md): Receive and verify WhatsApp Business Platform (Cloud API) webhooks from Meta. Use when setting up WhatsApp webhook handlers, completing the GET verification handshake, debugging X-Hub-Signature-256 signature verification, or handling inbound message and message status (sent, delivered, read, failed) events under the whatsapp_business_account object.
- [Wix Webhooks](/webhooks/skills/wix-webhooks.md): Receive and verify Wix webhooks. Use when setting up Wix webhook handlers for self-hosted/self-managed apps, debugging JWT signature verification with your app's public key, or handling events like wix.ecom.v1.order_created, wix.ecom.v1.order_approved, wix.ecom.v1.order_updated, and wix.ecom.v1.order_canceled.
- [WooCommerce Webhooks](/webhooks/skills/woocommerce-webhooks.md): Receive and verify WooCommerce webhooks. Use when setting up WooCommerce webhook handlers, debugging signature verification, or handling e-commerce events like order.created, order.updated, product.created, or customer.created.
- [WordPress.com Webhooks](/webhooks/skills/wordpress-com-webhooks.md): Receive WordPress.com webhooks (Settings -> Webhooks, the native /wp-admin/options-general.php?page=webhooks feature). Use when building a WordPress.com webhook receiver, because these deliveries are UNSIGNED: there is no HMAC, no signature header, no secret, no timestamp and no handshake, and the body is a FLAT application/x-www-form-urlencoded set of key/value pairs whose only discriminator is the `hook` field (`publish_post`, `publish_page`, `comment_post`). Use when wiring express.urlencoded / request.formData() / await request.form(), protecting an unsigned endpoint with a query-string token, or deduping repeated publish_post deliveries. NOT WooCommerce (X-WC-Webhook-Signature) and not a WordPress.org plugin.
- [WorkOS Webhooks](/webhooks/skills/workos-webhooks.md): Receive and verify WorkOS webhooks. Use when setting up WorkOS webhook handlers, debugging WorkOS-Signature verification, or handling enterprise auth events like dsync.user.created, dsync.group.user_added, connection.activated, user.created, or session.created.
- [Xero Webhooks](/webhooks/skills/xero-webhooks.md): Receive and verify Xero webhooks. Use when setting up Xero webhook handlers, debugging x-xero-signature verification, passing Xero's Intent to Receive (ITR) validation, or handling accounting events like CONTACT/CREATE, INVOICE/UPDATE, CREDITNOTE, and SUBSCRIPTION changes.
- [Zendesk Webhooks](/webhooks/skills/zendesk-webhooks.md): Receive and verify Zendesk webhooks. Use when setting up Zendesk webhook handlers, debugging signature verification (X-Zendesk-Webhook-Signature), or handling event subscriptions like zen:event-type:ticket.created, zen:event-type:ticket.comment_added, or trigger/automation webhooks.
- [Zero Hash Webhooks](/webhooks/skills/zerohash-webhooks.md): Receive and verify Zero Hash webhooks. Use when setting up Zero Hash webhook handlers, debugging x-zh-hook-signature verification, or handling crypto settlement, payment, and balance events like trade_status_changed and payment_status_changed.
- [Zift Webhooks](/webhooks/skills/zift-webhooks.md): Receive and acknowledge Zift (Zift Payments / payment gateway) webhook notifications. Use when setting up a Zift webhook receiver, understanding why there is no signature/HMAC header to verify, returning the required {"notificationId": ...} acknowledgement, or handling billing and processing events like billing.subscription-created, processing.chargeback, and processing.return.
- [Zoom Webhooks](/webhooks/skills/zoom-webhooks.md): Receive and verify Zoom webhooks. Use when setting up Zoom webhook handlers, debugging signature verification, completing the endpoint.url_validation handshake, or handling meeting and recording events like meeting.started, meeting.ended, meeting.participant_joined, or recording.completed.