webhooks

Manage webhook endpoints with registration, enablement, and HMAC-SHA256 verification.

650|137|Updated Jan 26, 2026
One-click install
npx skills add https://github.com/alsk1992/CloddsBot --skill webhooks-alsk1992
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: webhooks
Source: https://github.com/alsk1992/CloddsBot/tree/main/src/skills/bundled/webhooks
Command: npx skills add https://github.com/alsk1992/CloddsBot --skill webhooks-alsk1992

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill simplifies the process of registering, managing, and inspecting incoming webhook endpoints, ensuring secure and controlled communication.

Core Features & Use Cases

  • Webhook Registration: Easily set up new webhook endpoints with optional HMAC secrets for security.
  • Management: Enable, disable, list, and unregister webhooks.
  • Security: Supports HMAC-SHA256 signature verification for authenticated requests.
  • Use Case: You need to receive real-time trade signals from an external service. Register a webhook endpoint to securely receive these signals, verifying their authenticity using a shared secret.

Quick Start

Register a new webhook endpoint for trade signals at the path /hooks/trades with a secret key.

Frequently Asked Questions about webhooks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage webhook endpoints for external API integration?

You can manage webhook endpoints by registering, unregistering, enabling, disabling, and retrieving details. This provides a secure and manageable interface for receiving data payloads from external services.

How does HMAC-SHA256 signature verification secure incoming webhooks?

HMAC-SHA256 signature verification secures incoming webhooks by authenticating requests with a shared secret. This ensures that the data payloads received from external services are verified for authenticity and integrity.

How do I register a new webhook endpoint to receive real-time data signals?

To register a new webhook endpoint, you set up the desired path and optionally provide an HMAC secret key. This allows you to securely receive real-time data signals from external services.

Can I disable and re-enable webhook endpoints without deleting their configuration?

Yes, you can disable and re-enable webhook endpoints without deleting them. The management interface supports both enabling and disabling endpoints to control data flow while retaining registration details.

What is the best way to verify the authenticity of incoming webhook payloads?

The best way to verify the authenticity of incoming webhook payloads is by using HMAC-SHA256 signature verification. This method validates incoming requests against a shared secret during endpoint registration.

Do I need a secret key to set up a webhook endpoint for trade signals?

A secret key is not strictly required but is highly recommended for setting up a webhook endpoint. Providing an HMAC secret enables signature verification to securely receive authenticated trade signals.