Webhook Signature Debug API
Verify webhook signatures and get provider-specific diagnostics for raw-body, timestamp, header, and secret mistakes.
curl -X POST https://webhook-signature-debug-api.linkridge.net/v1/webhooks/verify \
-H 'content-type: application/json' \
-H 'X-API-Key: YOUR_API_KEY' \
-d '{"provider":"github","payload":"Hello, World!","headers":{"X-Hub-Signature-256":"sha256=..."},"secret":"..."}'
Provider-aware
GitHub, Slack, Stripe, Shopify, and generic HMAC-SHA256 verification paths.
Debuggable
Separate checks for missing headers, bad formats, timestamp drift, and signature mismatches.
Privacy-first
No payload or secret storage. Logs include route, status, timing, and hashed API key only.