Webhook guides

How each provider sends webhooks, which headers matter, and how to check the signature in Go and Node.js. Every guide starts from a temporary URL, so you can capture a real delivery before you write the handler.

Create a test URL

Test Alchemy webhooks: Get a temporary URL for Alchemy Notify webhooks, inspect the payload and verify the X-Alchemy-Signature header in Go and Node.js.
Test GitHub webhooks: Point a GitHub webhook at a temporary URL, inspect X-GitHub-Event and the payload, and validate X-Hub-Signature-256 in Go and Node.js.
Test Helius webhooks: Capture Helius Solana webhooks on a temporary URL, see enhanced and raw payloads, and check the Authorization header Helius echoes back.
Test Moralis Streams webhooks: Catch the Moralis Streams test webhook on a temporary URL, see confirmed and unconfirmed deliveries, and verify the x-signature header.
Test QuickNode Streams webhooks: Point a QuickNode Stream at a temporary URL, inspect the gzip and X-QN headers, and verify the nonce, timestamp and HMAC signature.
Test Stripe webhooks: Send Stripe events to a temporary URL, read the Stripe-Signature header and verify t= and v1= by hand in Go and Node.js.

To check a signature by hand, use the signature verifier.