Stripe webhook validation
Configure a Stripe validation endpoint when you want Hookmetry to evaluate the Stripe-Signature header captured with a request.
Before you begin
- A Stripe endpoint signing secret.
- A Hookmetry endpoint configured with Stripe validation.
Configure validation
- Create or edit a Hookmetry endpoint with validation type Stripe.
- Enter the Stripe endpoint signing secret for the matching provider environment.
- Configure Stripe to send requests to the Hookmetry capture URL.
- Send a Stripe test event and inspect the captured log.
How it works
Hookmetry parses the Stripe-Signature header for a timestamp and versioned signature. It computes HMAC-SHA256 over timestamp plus raw body, then compares that value with the received signature.
Common mismatch causes
- The secret belongs to another Stripe endpoint or environment.
- The raw body differs from the bytes Stripe signed.
- The request timestamp is outside the validation window.
- The header is missing or malformed.