openai-webhooks

Name: openai-webhooks
Availability: InStock
Author: Hookdeck

Verify OpenAI webhook signatures using the Standard Webhooks scheme.

79|11|Updated Jan 30, 2026

Search Tags:#security #OpenAI #FastAPI #webhooks #Express #signature-verification #OpenAI-webhooks

Ready to run

npx skills add https://github.com/hookdeck/webhook-skills --skill openai-webhooks

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: openai-webhooks
Source: https://github.com/hookdeck/webhook-skills/tree/main/skills/openai-webhooks
Command: npx skills add https://github.com/hookdeck/webhook-skills --skill openai-webhooks

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill enables applications to securely receive and verify OpenAI webhooks using the Standard Webhooks scheme, ensuring only authentic events are processed.

Core Features & Use Cases

Signature verification for OpenAI webhooks (webhook-id, webhook-timestamp, webhook-signature) using v1; protects against replay and spoofing
Provides ready-to-run examples for Node.js (Express, Next.js) and Python (FastAPI), enabling quick integration
Supports common OpenAI events such as fine_tuning., batch., and realtime.* with guidance and test coverage

Quick Start

Set OPENAI_WEBHOOK_SECRET to your whsec_<base64> value in your environment
Run the provided examples (Express, Next.js, FastAPI) to start local receivers
Expose your endpoint with Hookdeck or a tunneling service and test with sample events

Frequently Asked Questions about openai-webhooks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I verify OpenAI webhooks in a FastAPI or Express application?▼

You verify OpenAI webhooks by checking Standard Webhooks headers (webhook-id, webhook-timestamp, webhook-signature) against the raw request body using your secret. This Skill provides ready-to-run FastAPI, Express, and Next.js examples for seamless integration.

What is the Standard Webhooks verification scheme for OpenAI events?▼

Standard Webhooks verification validates webhook-id, webhook-timestamp, and webhook-signature headers to protect against replay and spoofing. It requires the raw request body and validates timestamps within a five-minute window to ensure authentic event processing.

Which OpenAI webhook events are supported by this signature verification method?▼

This signature verification method supports common OpenAI webhook events including fine_tuning.*, batch.*, and realtime.*. It provides guidance and test coverage for these events across Node.js, Python, and Next.js environments.

Why does OpenAI webhook signature verification fail when using parsed JSON bodies?▼

OpenAI webhook signature verification fails with parsed JSON because the Standard Webhooks scheme requires the raw request body to accurately compute the signature. You must access the raw payload directly before any framework-level parsing occurs.

Do I need a tunneling service to test OpenAI webhook integration locally?▼

Yes, you need a tunneling service or Hookdeck to expose your local endpoint to the internet. After setting your OPENAI_WEBHOOK_SECRET, you expose your local receiver and test it with sample events to validate the integration.