hookdeck-event-gateway-webhooks

Name: hookdeck-event-gateway-webhooks
Availability: InStock
Author: Hookdeck

Verify Hookdeck webhook signatures and handle events in Express, Next.js, and FastAPI.

79|11|Updated Jan 30, 2026

Search Tags:#Next.js #FastAPI #webhooks #Express #signature-verification #Hookdeck

Ready to run

npx skills add https://github.com/hookdeck/webhook-skills --skill hookdeck-event-gateway-webhooks

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hookdeck-event-gateway-webhooks
Source: https://github.com/hookdeck/webhook-skills/tree/main/skills/hookdeck-event-gateway-webhooks
Command: npx skills add https://github.com/hookdeck/webhook-skills --skill hookdeck-event-gateway-webhooks

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps developers securely receive webhooks forwarded through the Hookdeck Event Gateway by validating the Hookdeck signature header and routing events to the appropriate framework handlers (Express, Next.js, and FastAPI).

Core Features & Use Cases

Signature verification: validate the x-hookdeck-signature header for authenticity
Framework-ready examples: included handlers for Express, Next.js (App Router), and FastAPI for quick integration
Debugging visibility: guidance for using Hookdeck headers to trace event flow and diagnose signature verification failures

Quick Start

Review the included example handlers for Express, Next.js, and FastAPI.
Set HOOKDECK_WEBHOOK_SECRET in your environment and enable signature verification in your app.
Run the examples locally (Express, Next.js, FastAPI) and test with sample webhook events.

Frequently Asked Questions about hookdeck-event-gateway-webhooks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I verify Hookdeck webhooks using signature checks?▼

To verify Hookdeck webhooks, validate the x-hookdeck-signature header using HMAC-SHA-256 signature verification with base64 encoding. You must access the raw body of the incoming request to properly compute and compare the hash.

How do I handle webhook signature verification in Next.js App Router?▼

Webhook signature verification in Next.js App Router requires accessing the raw request body before parsing. The skill provides framework-ready handlers to validate the Hookdeck signature header and securely route events to your application logic.

Can I use Express and FastAPI to process webhooks forwarded through Hookdeck?▼

Yes, you can use Express and FastAPI to process webhooks forwarded through Hookdeck. The skill includes framework-ready example handlers for both platforms to help you quickly implement signature validation and event routing.

Why does webhook signature verification fail when parsing JSON bodies?▼

Webhook signature verification fails when parsing JSON bodies because the HMAC-SHA-256 hash computation requires the exact raw-body bytes. Modifying the body structure or whitespace during JSON parsing invalidates the signature comparison.

How do I debug Hookdeck webhook events and signature failures?▼

To debug Hookdeck webhook events and signature failures, use the Hookdeck headers attached to the forwarded request. These headers provide visibility into the event flow and help diagnose mismatches in your signature verification logic.

Do I need a webhook secret to validate the x-hookdeck-signature header?▼

Yes, you need to set the HOOKDECK_WEBHOOK_SECRET in your environment variables to validate the x-hookdeck-signature header. This secret is used as the cryptographic key for generating the HMAC-SHA-256 hash.