standard

Standard Webhooks

Open specification for signing and verifying webhook payloads, defining webhook-id, webhook-timestamp and webhook-signature headers with an HMAC-SHA256 signature over the id, timestamp and raw body.

Current clusters

build1 publisher

This revocation intake writes the audit row before it touches the gateway's key cache

A dev.to design walkthrough pairs signed webhook intake with an hourly polling sweep over per-tenant API keys. It argues the architecture should be settled by what an access review can reconstruct afterwards.

Publishers:dev.to

Reality

Evidence42
Adoption: Insufficient
Hype gap+12
Incentives22
Confidence46