How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Signing and verifying Tool Webhook payloads with X-Novu-Signature (HMAC-SHA256)

calendar_today September 24, 2026 person Victor Yakubu domain novu

Turn on signing, recompute the HMAC over the raw body, and reject anything that does not match. Plus what the signature does and does not protect.

open_in_new Read original post