This repository contains webhook-related skills for AI coding agents that need to receive, verify signatures, handle events, retry deliveries, or debug webhook integrations from various providers (see Provider Webhook Skills table below).

Skills provide step-by-step instructions, signature verification code, and runnable examples for Express, Next.js, and FastAPI.

Works with Claude Code, Cursor, VS Code Copilot, and other AI coding assistants that support the Agent Skills specification.

Use these webhook skills when:

• You need to receive webhooks from third-party providers (Stripe, Shopify, GitHub, etc.)
• You need to verify webhook signatures to ensure authenticity
• You need to handle webhook event payloads and extract data
• You need to implement idempotency for webhook handlers
• You need to retry or replay failed webhook deliveries
• You need provider-specific webhook handling logic (e.g., Stripe checkout events, GitHub push events)

These skills are designed to be discoverable by agents using skill registries and tools like find-skills, where an agent searches for webhook-related capabilities by provider or task.

Skills for receiving and verifying webhooks from specific providers. Each includes setup guides, webhook signature verification, and runnable examples.

Framework-agnostic best practices for webhook handling, applicable across any webhook integration.

Skills for webhook infrastructure products — routing, queuing, delivery, and observability.

Meta-skills that evaluate the developer experience of platforms sending outbound webhooks and event destinations, rather than helping you receive or send them. "Event destinations" covers the broader case where a platform delivers events to user-chosen destinations beyond HTTP (SQS, Pub/Sub, RabbitMQ, EventBridge, Kafka), not only webhooks.

# List available webhook skills
npx skills add hookdeck/webhook-skills --list

# Install Stripe webhook skill
npx skills add hookdeck/webhook-skills --skill stripe-webhooks

# Install multiple webhook skills
npx skills add hookdeck/webhook-skills --skill stripe-webhooks --skill shopify-webhooks

Claude Code distributes this repo as a plugin marketplace. Add the marketplace once, then install either a single provider skill or the bundle of all 40 skills.

# Add this marketplace
/plugin marketplace add hookdeck/webhook-skills

# Install one provider skill (each is ~200 KB)
/plugin install stripe-webhooks@webhook-skills

# Or install all 40 webhook skills as one bundle (~3 MB)
/plugin install webhook-skills@webhook-skills

Plugin skills are namespaced with their plugin name, so the bundle exposes skills as webhook-skills:stripe-webhooks, webhook-skills:shopify-webhooks, etc., while a granular install exposes the same skill as stripe-webhooks:stripe-webhooks.

To receive webhooks on localhost during development, run Hookdeck CLI via npx — no install required:

# Start local webhook tunnel (no account required)
npx hookdeck-cli listen 3000 stripe --path /webhooks/stripe

This provides a public URL that forwards webhook events to your local server, plus a web UI for inspecting and replaying webhook requests.

If an agent receives a checkout.session.completed event from Stripe, the stripe-webhooks skill can:

1. Verify the webhook signature using Stripe's signing secret
2. Parse the event payload to extract checkout session data
3. Return a normalized event object for further processing

After installing the skill, ask your AI assistant:

"Help me set up Stripe webhook handling in my Express app"

The agent will:

1. Read stripe-webhooks/SKILL.md to understand webhook verification
2. Reference stripe-webhooks/references/verification.md for signature verification details
3. Copy code from stripe-webhooks/examples/express/ as a starting point
4. Suggest npx hookdeck-cli listen 3000 stripe --path /webhooks/stripe for local webhook testing

If an agent needs to verify GitHub webhook authenticity, the github-webhooks skill can:

1. Extract the signature header (X-Hub-Signature-256)
2. Compute HMAC-SHA256 of the raw request body
3. Compare signatures using timing-safe comparison

Ask your AI assistant:

"How do I verify GitHub webhook signatures in Next.js?"

Each webhook skill follows a consistent structure:

skills/{provider}-webhooks/
├── SKILL.md              # Entry point — webhook overview, when to use
├── references/           # Documentation loaded on-demand
│   ├── overview.md       # What webhooks are available, common events
│   ├── setup.md          # Provider dashboard configuration
│   └── verification.md   # Webhook signature verification details
└── examples/             # Runnable webhook handler examples
    ├── express/          # Express.js webhook handler
    ├── nextjs/           # Next.js API route webhook handler
    └── fastapi/          # FastAPI webhook handler

Examples are complete, runnable webhook handlers following PostHog's approach — minimal code that demonstrates webhook signature verification and event handling.

We welcome contributions! The recommended way to add new provider webhook skills is using our AI-powered generator:

# One-time setup
cd scripts/skill-generator && npm install && cd ../..

# Generate a webhook skill (with documentation URL for best results)
./scripts/generate-skills.sh generate \
  "twilio=https://www.twilio.com/docs/usage/webhooks" \
  --create-pr

The generator researches the provider's webhook documentation, generates signature verification code and tests for Express/Next.js/FastAPI, validates accuracy, and creates a PR — all automatically.

See CONTRIBUTING.md for the complete guide, including:

• Providing multiple documentation URLs for better webhook skill generation
• Using YAML configs for batch webhook skill generation
• Resuming failed generations with the review command
• Updating existing webhook skills
• Manual contribution guidelines

• Agent Skills Specification — The open standard for AI agent skills
• Skills Directory — Discover and install agent skills
• Hookdeck CLI — Local webhook tunnel and debugging
• Hookdeck Documentation — Webhook infrastructure platform

MIT