clerk-webhooks

Verify Clerk webhook signatures using Svix headers and process events.

79|11|Updated Jan 30, 2026
One-click install
npx skills add https://github.com/hookdeck/webhook-skills --skill clerk-webhooks
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: clerk-webhooks
Source: https://github.com/hookdeck/webhook-skills/tree/main/skills/clerk-webhooks
Command: npx skills add https://github.com/hookdeck/webhook-skills --skill clerk-webhooks

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you quickly set up secure Clerk webhook endpoints that validate signatures, filter events, and reliably process events like user.created, user.updated, session.created, and organization.created.

Core Features & Use Cases

  • Signature verification with Clerk webhooks to ensure authenticity.
  • Event handling scaffolds for common Clerk events (user/session/organization) with examples in Express, FastAPI, and Next.js.
  • Local testing and debugging guidance using Hookdeck and environment variable templates for rapid iteration.

Quick Start

Use Clerk webhooks skill to verify and handle events by posting signed requests to your /webhooks/clerk endpoint, configure CLERK_WEBHOOK_SECRET=whsec_..., and run the provided Express/FastAPI/Next.js examples.

Frequently Asked Questions about clerk-webhooks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify Clerk webhook signatures in Next.js?

You verify Clerk webhook signatures in Next.js by checking Svix headers (svix-id, svix-timestamp, svix-signature) against your CLERK_WEBHOOK_SECRET. This ensures only authentic events are processed by your endpoint.

What is the replay window for validating Clerk webhooks?

The replay window for validating Clerk webhooks is five minutes. Verifying the svix-timestamp header within this window prevents delayed or replayed requests from being processed by your application.

How do I handle user.created and user.updated events in FastAPI?

To handle user.created and user.updated events in FastAPI, set up an endpoint that verifies the Svix signature, then filters and routes the event payload to your application logic for reliable user data processing.

Does Clerk webhook signature verification support multiple signatures?

Yes, Clerk webhook signature verification supports multiple signatures. The validation logic checks the svix-signature header to correctly authenticate requests even when multiple signatures are present.

Do I need a whsec_ secret to secure Clerk webhooks in Express?

Yes, you need a whsec_ secret to secure Clerk webhooks in Express. Configure it as the CLERK_WEBHOOK_SECRET environment variable to enforce signature verification on incoming requests.

Why are my Clerk webhooks failing signature verification locally?

Clerk webhooks fail signature verification locally when the svix-signature header does not match your CLERK_WEBHOOK_SECRET. Use local testing guidance and verify environment variables to debug the request payload.