Verifying a Svix Delivery Signature

How to verify the Svix HMAC-SHA256 delivery signature on an incoming webhook to confirm the request genuinely came from RTGS.global delivery infrastructure and is not a replay.

← All recipes

curl -X GET "{svix-server-url}/api/v1/app/{appId}/endpoint/{endpointUid}/secret/" \
  -H "Authorization: Bearer {management-token}"

Response

{ "key": "whsec_MfKQ9r8GKYqrTwjUPD8ILPZIo2LaLaSw" }