Verify an HMAC webhook signature
POST/tools/webhook-signature-verifier
Verify an HMAC webhook signature. The same logic as the free web tool at https://postboost.co/tools/webhook-signature-verifier. No account needed: call it without a token, or with any API token.
Request
Responses
- 200
- 401
- 413
- 422
- 429
The tool output.
Response Headers
X-RateLimit-Limit
Calls allowed in the limit window closest to running out.
X-RateLimit-Remaining
Calls left in that window.
Missing or invalid API token.
The request body is larger than 128 KB.
Validation failed.
Rate limit reached. Without a token: 30 calls per minute and 500 per UTC day per IP address (IPv6 per /64). With a token: 300 per minute per user; the Free plan also has 1,000 calls per UTC day, paid plans have no daily cap.
Response Headers
X-RateLimit-Limit
Calls allowed in the limit window closest to running out.
X-RateLimit-Remaining
Calls left in that window.
Retry-After
Seconds until the limit resets.