skills.rest
hookdeck
hookdeckOFFICIAL
Explore all skills by this author →
Website𝕏@hookdeckGitHub

openai-webhooks

Verify OpenAI webhook signatures using the Standard Webhooks scheme.

79|11|Updated Jan 30, 2026
Search Tags:#security#OpenAI#FastAPI#webhooks#Express#signature-verification#OpenAI-webhooks
One-click install
npx skills add https://github.com/hookdeck/webhook-skills --skill openai-webhooks
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: openai-webhooks
Source: https://github.com/hookdeck/webhook-skills/tree/main/skills/openai-webhooks
Command: npx skills add https://github.com/hookdeck/webhook-skills --skill openai-webhooks

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill enables applications to securely receive and verify OpenAI webhooks using the Standard Webhooks scheme, ensuring only authentic events are processed.

Core Features & Use Cases

  • Signature verification for OpenAI webhooks (webhook-id, webhook-timestamp, webhook-signature) using v1; protects against replay and spoofing
  • Provides ready-to-run examples for Node.js (Express, Next.js) and Python (FastAPI), enabling quick integration
  • Supports common OpenAI events such as fine_tuning., batch., and realtime.* with guidance and test coverage

Quick Start

  1. Set OPENAI_WEBHOOK_SECRET to your whsec_<base64> value in your environment
  2. Run the provided examples (Express, Next.js, FastAPI) to start local receivers
  3. Expose your endpoint with Hookdeck or a tunneling service and test with sample events

Frequently Asked Questions about openai-webhooks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify OpenAI webhooks in a FastAPI or Express application?▼

You verify OpenAI webhooks by checking Standard Webhooks headers (webhook-id, webhook-timestamp, webhook-signature) against the raw request body using your secret. This Skill provides ready-to-run FastAPI, Express, and Next.js examples for seamless integration.

What is the Standard Webhooks verification scheme for OpenAI events?▼

Standard Webhooks verification validates webhook-id, webhook-timestamp, and webhook-signature headers to protect against replay and spoofing. It requires the raw request body and validates timestamps within a five-minute window to ensure authentic event processing.

Which OpenAI webhook events are supported by this signature verification method?▼

This signature verification method supports common OpenAI webhook events including fine_tuning.*, batch.*, and realtime.*. It provides guidance and test coverage for these events across Node.js, Python, and Next.js environments.

Why does OpenAI webhook signature verification fail when using parsed JSON bodies?▼

OpenAI webhook signature verification fails with parsed JSON because the Standard Webhooks scheme requires the raw request body to accurately compute the signature. You must access the raw payload directly before any framework-level parsing occurs.

Do I need a tunneling service to test OpenAI webhook integration locally?▼

Yes, you need a tunneling service or Hookdeck to expose your local endpoint to the internet. After setting your OPENAI_WEBHOOK_SECRET, you expose your local receiver and test it with sample events to validate the integration.

Related Skills

Explore More Software Engineering Skills→
hookdeckhookdeck
79

cursor-webhooks

Validate Cursor Cloud Agent webhook signatures with HMAC-SHA256.

Official
Intermediate
ClawLink-HQClawLink-HQ
117

openai-ai

Manage OpenAI API resources including files, assistants, vector stores, and models.

Official
Advanced
hookdeckhookdeck
79

hookdeck-event-gateway-webhooks

Verify Hookdeck webhook signatures and handle events in Express, Next.js, and FastAPI.

Official
Intermediate
jrmatherlyjrmatherly

webhook-security

Verify HMAC-SHA256 signatures and validate webhook payloads.

Community
Advanced