Pricing

from $20.00 / 1,000 run starteds

Try for free

Go to Apify Store

Webhook Receiver Contract and Signature Rotation Verifier

Try for free

Sends signed and deliberately bad deliveries to one webhook receiver and reports, for each case, whether the receiver answered with the expected HTTP status. Use it after a deploy and after a secret rotation. HTTP only, no browser, no proxy.

Pricing

from $20.00 / 1,000 run starteds

Rating

0.0

(0)

Developer

kingii98

Actor stats

Bookmarked

Total users

Monthly active users

8 days ago

Last modified

Categories

You can access the Webhook Receiver Contract and Signature Rotation Verifier programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

# Set API token
$API_TOKEN=<YOUR_API_TOKEN>

# Prepare Actor input
$cat > input.json << 'EOF'
<{
<  "receiverUrl": "https://postman-echo.com/post",
<  "signatureScheme": "hmac_sha256",
<  "signatureHeader": "X-Signature-256",
<  "signatureTemplate": "sha256={signature}",
<  "signedPayloadTemplate": "{body}",
<  "timestampHeader": "X-Timestamp",
<  "cases": [
<    {
<      "name": "good-delivery",
<      "mode": "valid",
<      "payload": {
<        "event": "ping",
<        "id": "{nonce}",
<        "sentAt": "{timestamp}"
<      },
<      "expectedStatusMin": 200,
<      "expectedStatusMax": 299
<    },
<    {
<      "name": "no-signature-header",
<      "mode": "missing",
<      "payload": {
<        "event": "ping",
<        "id": "{nonce}",
<        "sentAt": "{timestamp}"
<      },
<      "expectedStatusMin": 401,
<      "expectedStatusMax": 403
<    },
<    {
<      "name": "wrong-secret",
<      "mode": "wrong-secret",
<      "payload": {
<        "event": "ping",
<        "id": "{nonce}",
<        "sentAt": "{timestamp}"
<      },
<      "expectedStatusMin": 401,
<      "expectedStatusMax": 403
<    }
<  ],
<  "tamperReplayProbes": false,
<  "probeExpectedStatusMin": 400,
<  "probeExpectedStatusMax": 499,
<  "timeoutSeconds": 10,
<  "maxRequests": 200,
<  "requestsPerSecond": 5,
<  "maxResponseBytes": 65536,
<  "oversizedBodyBytes": 100000,
<  "replayAgeSeconds": 900,
<  "contentType": "application/json",
<  "userAgent": "WebhookContractVerifier/0.1 (+https://apify.com)"
<}
<EOF

# Run the Actor using an HTTP API
# See the full API reference at https://docs.apify.com/api/v2
$curl "https://api.apify.com/v2/actors/kingii98~webhook-receiver-contract-and-signature-rotation-verifier/runs?token=$API_TOKEN" \
<  -X POST \
<  -d @input.json \
<  -H 'Content-Type: application/json'

Webhook Receiver Contract and Signature Rotation Verifier API

Below, you can find a list of relevant HTTP API endpoints for calling the Webhook Receiver Contract and Signature Rotation Verifier Actor. For this, you’ll need an Apify account. Replace <YOUR_API_TOKEN> in the URLs with your Apify API token, which you can find under API & Integrations in Apify Console. For details, see the API reference.

Run Actor

POST
https://api.apify.com/v2/actors/kingii98~webhook-receiver-contract-and-signature-rotation-verifier/runs?token=<YOUR_API_TOKEN>

Note: By adding the method=POST query parameter, this API endpoint can be called using a GET request and thus used in third-party webhooks. Please refer to our Run Actor API documentation.

Run Actor synchronously and get dataset items

POST
https://api.apify.com/v2/actors/kingii98~webhook-receiver-contract-and-signature-rotation-verifier/run-sync-get-dataset-items?token=<YOUR_API_TOKEN>

Note: This endpoint supports both POST and GET request methods. However, only the POST method allows you to pass input data. For more information, please refer to our Run Actor synchronously and get dataset items API documentation.

Get Actor

GET
https://api.apify.com/v2/actors/kingii98~webhook-receiver-contract-and-signature-rotation-verifier?token=<YOUR_API_TOKEN>

For more information, please refer to our Get Actor API documentation.

Actors can be used to scrape web pages, extract data, or automate browser tasks. Use the Webhook Receiver Contract and Signature Rotation Verifier API programmatically via the Apify API.

You can choose from:

Webhook Receiver Contract and Signature Rotation Verifier API in Python

Webhook Receiver Contract and Signature Rotation Verifier API in JavaScript

Webhook Receiver Contract and Signature Rotation Verifier API through CLI

Webhook Receiver Contract and Signature Rotation Verifier OpenAPI definition

You can start Webhook Receiver Contract and Signature Rotation Verifier with the Apify API by sending an HTTP POST request to the Run Actorendpoint. An Actor’s input and its content type can be passed as a payload of the POST request, and additional options can be specified using URL query parameters. The Webhook Receiver Contract and Signature Rotation Verifier is identified within the API by its ID, which is the creator’s username and the name of the Actor.

When the Webhook Receiver Contract and Signature Rotation Verifier run finishes you can list the data from its default dataset(storage) via the API or you can preview the data directly on Apify Console.

CodePerfection Customer Failure Receiver

codeperfection/codeperfection-failure-receiver

Private Standby receiver for authenticated Actor failure telemetry.

CodePerfection

HTTP API & Webhook Gateway

amernas/http-api-webhook-gateway

A versatile actor that functions as both a powerful HTTP client and a secure webhook receiver. If your application can trigger an Apify actor but can't make direct HTTP calls, use this tool to interact with any external API. It also provides a stable endpoint to receive incoming webhooks.

Traffic Architect

Webhook API

vivid_astronaut/webhook

BRAINIALL Team

Webhook Signature Verifier

stellar_ballet_0bu/webhook-sig-verifier

Verify HMAC-SHA256/SHA1/SHA512, Stripe-Signature, GitHub X-Hub-Signature-256, Apify webhook, and Bearer-token webhook payloads against a shared secret. Constant-time compare, per-check pass/fail, structured reason codes for n8n/Make/Sheets alerts.

Nikita S

Scheduled Job Heartbeat and Silence Ledger

kingii98/scheduled-job-heartbeat-and-silence-ledger

Your cron job sends one curl ping after each run. This Actor keeps the ledger in a named key-value store and reports every job that went silent, with an optional webhook alert. HTTP only, no browser, no proxy, no database.

kingii98

WhatsApp Real-Time Message API - Webhook & Telegram

clearpath/whatsapp-real-time-message-api

Real-time WhatsApp message receiver with instant webhook and Telegram forwarding. One-time QR authentication with persistent sessions. Download media (images, audio notes, videos, docs). Filter messages by chat type. Built-in REST API for monitoring and message retrieval.

ClearPath

DNS Cutover Convergence Gate with Webhook Receipt

kingii98/dns-cutover-convergence-gate-with-webhook-receipt

Polls public DNS-over-HTTPS resolvers until a record matches the expected value at every resolver, then sends one webhook and writes one sealed receipt. Built for the moment of a cutover, so the next step can start. HTTP only, no browser, no proxy, no dat

kingii98

Webhook Signature MCP

q_services/webhook-signature-mcp

Generate and verify HMAC webhook signatures with constant-time comparison, GitHub and Stripe formats, timestamp tolerance and no secret disclosure.

Q Services

Solana Whale Tracker — Large SOL Transactions

velveted_staysail/whale-tracker

Tracks large SOL transfers on Solana mainnet. Returns sender, receiver, amount in SOL, and transaction signature. No API key needed.

FASTEEDAPPS

Webhook Event Store

fiery_dream/webhook-event-store

Webhook Event Store & Replay System The ultimate debugging tool for webhook integrations. Capture, inspect, and replay webhook events from any service. 🎯 What It Does Webhook Event Store provides a complete lifecycle management system for webhooks.