paddle-webhooks

Verify Paddle webhook signatures and parse events in Node.js, Next.js, and FastAPI.

79|11|Updated Jan 30, 2026
One-click install
npx skills add https://github.com/hookdeck/webhook-skills --skill paddle-webhooks
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: paddle-webhooks
Source: https://github.com/hookdeck/webhook-skills/tree/main/skills/paddle-webhooks
Command: npx skills add https://github.com/hookdeck/webhook-skills --skill paddle-webhooks

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Paddle webhooks require secure receipt and verification to ensure events are authentic. This skill provides a ready-made setup to receive, verify, and parse Paddle webhook events, so your app can respond to subscriptions, transactions, and customer updates safely.

Core Features & Use Cases

  • Verify Paddle signatures using both manual verification and optional SDK-based verification.
  • Handle common Paddle events such as subscription.created, subscription.activated, subscription.canceled, transaction.completed, and customer.created/updated.
  • Demonstrates integration patterns in Express, Next.js, and FastAPI with a health check and test endpoints.

Quick Start

  • Install dependencies and run the example server (Express, Next.js, or FastAPI) as described in the skill's README.
  • Set PADDLE_WEBHOOK_SECRET in your environment and configure a notification destination in Paddle Dashboard.
  • Send a test webhook using Paddle's simulator or Hookdeck CLI to verify signature verification.

Frequently Asked Questions about paddle-webhooks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify Paddle webhooks in FastAPI?

To verify Paddle webhooks in FastAPI, you must handle the raw request body, parse the Paddle-Signature header, and validate it using your PADDLE_WEBHOOK_SECRET environment variable.

What is the Paddle-Signature header used for in webhook security?

The Paddle-Signature header is used to verify that webhook events are authentic by validating it against the raw request body and your PADDLE_WEBHOOK_SECRET.

Can I use the Paddle SDK for webhook signature verification instead of manual parsing?

Yes, you can use the Paddle SDK for automated webhook signature verification as an alternative to manual parsing across Express, Next.js, and FastAPI implementations.

How do I handle Paddle subscription events in an Express application?

You handle Paddle subscription events in Express by configuring an endpoint to receive raw request bodies and verify the Paddle-Signature for events like subscription.created and subscription.activated.

Why does Paddle webhook verification fail without the raw request body?

Paddle webhook verification fails without the raw request body because signature validation requires the exact byte sequence received to match against your PADDLE_WEBHOOK_SECRET.