Sources

Source Types Reference

Each provider source type is a small contract: which HTTP methods are accepted, which headers FastHook verifies, what the provider expects during setup, and which field to fill in the FastHook source dialog.

69 source types68 provider presetsMethods, headers, challengesOfficial provider docs linked

How to use this reference

Start from the provider your webhook traffic comes from. The provider page tells you what to paste into the provider dashboard, what to enter in FastHook, which validation requests FastHook answers, and where rejected requests will appear when the provider sends the wrong method or signature.

Not sure how the provider signs webhooks?Compare signature schemes

Quick reference

Use this table when you already know the provider and need the FastHook field, headers, or setup order.

ProviderSource typeMethodsFastHook fieldHeaders and validation inputSetup behavior

FastHookWEBHOOKPOST, PUT, PATCH, DELETEOptional Basic Auth, API key, or HMAC fieldsAuthorization, Configured API key header, Configured signature headerNo setup challenge GitHubGITHUBPOST, PUT, PATCH, DELETEWebhook Signing Secretx-hub-signature-256, x-github-event, x-github-deliveryNo setup challenge StripeSTRIPEPOST, PUT, PATCH, DELETEWebhook Signing Secretstripe-signatureNo setup challenge ShopifySHOPIFYPOST, PUT, PATCH, DELETEWebhook Signing Secretx-shopify-hmac-sha256, x-shopify-topic, x-shopify-webhook-idNo setup challenge SlackSLACKPOST, PUT, PATCH, DELETEWebhook Signing Secretx-slack-signature, x-slack-request-timestampSetup challenge SvixSVIXPOST, PUT, PATCH, DELETESigning Secretsvix-id, svix-timestamp, svix-signatureNo setup challenge TwilioTWILIOPOST, PUT, PATCH, DELETEAuth Tokenx-twilio-signatureNo setup challenge MetaMETAGET, POSTApp Secret, Verify Tokenx-hub-signature-256, hub.challenge, hub.verify_tokenGET validation before POST Microsoft GraphMICROSOFT_GRAPHPOST, PUT, PATCH, DELETEOptional Client StatevalidationToken, clientStatevalidationToken response GitLabGITLABPOST, PUT, PATCH, DELETESigning or Secret Tokenx-gitlab-token, webhook-signature, webhook-id, webhook-timestampNo setup challenge HubSpotHUBSPOTPOST, PUT, PATCH, DELETEClient Secretx-hubspot-signature-v3, x-hubspot-request-timestampNo setup challenge ZoomZOOMPOST, PUT, PATCH, DELETESecret Tokenx-zm-signature, x-zm-request-timestampSetup challenge SendGridSENDGRIDPOST, PUT, PATCH, DELETEPublic Verification Keyx-twilio-email-event-webhook-signature, x-twilio-email-event-webhook-timestampNo setup challenge DiscordDISCORDPOST, PUT, PATCH, DELETEApplication Public Keyx-signature-ed25519, x-signature-timestampPING/PONG TelegramTELEGRAMPOST, PUT, PATCH, DELETESecret Tokenx-telegram-bot-api-secret-tokenNo setup challenge AWS SNSAWS_SNSPOST, PUT, PATCH, DELETEOptional Topic ARN, Optional certificate/public key through APISignature, SigningCertURL, SignatureVersion, SubscribeURLSubscription confirmation PayPalPAYPALPOST, PUT, PATCH, DELETEWebhook IDpaypal-transmission-id, paypal-transmission-time, paypal-transmission-sig, paypal-cert-url, paypal-auth-algoNo setup challenge MailgunMAILGUNPOST, PUT, PATCH, DELETEHTTP Signing Keysignature.timestamp, signature.token, signature.signatureNo setup challenge PostmarkPOSTMARKPOST, PUT, PATCH, DELETEUsername, PasswordAuthorizationNo setup challenge LINELINEPOST, PUT, PATCH, DELETEChannel Secretx-line-signatureNo setup challenge DocuSignDOCUSIGNPOST, PUT, PATCH, DELETEHMAC Keyx-docusign-signature-1, x-docusign-signature-NNo setup challenge DropboxDROPBOXGET, POSTWebhook Signing Secretchallenge, x-dropbox-signatureGET validation before POST IntercomINTERCOMPOST, PUT, PATCH, DELETEClient Secretx-hub-signatureNo setup challenge LinearLINEARPOST, PUT, PATCH, DELETEWebhook Signing Secretlinear-signature, linear-delivery, linear-eventNo setup challenge TypeformTYPEFORMPOST, PUT, PATCH, DELETEWebhook Signing Secrettypeform-signatureNo setup challenge CalendlyCALENDLYPOST, PUT, PATCH, DELETEWebhook Signing Secretcalendly-webhook-signatureNo setup challenge PaddlePADDLEPOST, PUT, PATCH, DELETEEndpoint Secret Keypaddle-signatureNo setup challenge SquareSQUAREPOST, PUT, PATCH, DELETESignature Keyx-square-hmacsha256-signatureNo setup challenge Coinbase CommerceCOINBASE_COMMERCEPOST, PUT, PATCH, DELETEShared Secretx-cc-webhook-signature, x-hook0-signatureNo setup challenge RazorpayRAZORPAYPOST, PUT, PATCH, DELETEWebhook Signing Secretx-razorpay-signatureNo setup challenge Lemon SqueezyLEMON_SQUEEZYPOST, PUT, PATCH, DELETEWebhook Signing Secretx-signatureNo setup challenge AsanaASANAPOST, PUT, PATCH, DELETEWebhook Signing Secretx-hook-secret, x-hook-signatureHook-secret handshake ZendeskZENDESKPOST, PUT, PATCH, DELETEWebhook Signing Secretx-zendesk-webhook-signature, x-zendesk-webhook-signature-timestampNo setup challenge OktaOKTAGET, POSTAuthorization Secretx-okta-verification-challenge, authorizationGET validation before POST ClerkCLERKPOST, PUT, PATCH, DELETEWebhook Signing Secretsvix-id, svix-timestamp, svix-signatureNo setup challenge ResendRESENDPOST, PUT, PATCH, DELETEWebhook Signing Secretsvix-id, svix-timestamp, svix-signatureNo setup challenge WorkOSWORKOSPOST, PUT, PATCH, DELETEWebhook Secretworkos-signatureNo setup challenge NylasNYLASGET, POSTWebhook Secretchallenge, x-nylas-signatureGET validation before POST XeroXEROPOST, PUT, PATCH, DELETEWebhook Signing Keyx-xero-signatureNo setup challenge BitbucketBITBUCKETPOST, PUT, PATCH, DELETEWebhook Signing Secretx-hub-signature, x-event-keyNo setup challenge TrelloTRELLOHEAD, POSTApplication Secretx-trello-webhookHEAD validation before POST WooCommerceWOO_COMMERCEPOST, PUT, PATCH, DELETEWebhook Signing Secretx-wc-webhook-signature, x-wc-webhook-topicNo setup challenge WebexWEBEXPOST, PUT, PATCH, DELETEWebhook Secretx-spark-signatureNo setup challenge MuxMUXPOST, PUT, PATCH, DELETEWebhook Signing Secretmux-signatureNo setup challenge VercelVERCELPOST, PUT, PATCH, DELETEOAuth2 Secretx-vercel-signatureNo setup challenge HerokuHEROKUPOST, PUT, PATCH, DELETESigning Secretheroku-webhook-hmac-sha256No setup challenge BuildkiteBUILDKITEPOST, PUT, PATCH, DELETEWebhook Tokenx-buildkite-signatureNo setup challenge CircleCICIRCLECIPOST, PUT, PATCH, DELETEWebhook Signing Secretcircleci-signatureNo setup challenge LaunchDarklyLAUNCHDARKLYPOST, PUT, PATCH, DELETEWebhook Signing Secretx-ld-signatureNo setup challenge ClickUpCLICKUPPOST, PUT, PATCH, DELETEWebhook Signing Secretx-signatureNo setup challenge GrafanaGRAFANAPOST, PUT, PATCH, DELETEWebhook Signing Secret, Optional signature_header and timestamp_header through APIx-grafana-alerting-signature, Configured timestamp headerNo setup challenge SentrySENTRYPOST, PUT, PATCH, DELETEWebhook Signing Secretsentry-hook-signatureNo setup challenge RevenueCatREVENUECATPOST, PUT, PATCH, DELETEAuthorization Header ValueauthorizationNo setup challenge Auth0AUTH0POST, PUT, PATCH, DELETEAuthorization Header ValueauthorizationNo setup challenge KlaviyoKLAVIYOPOST, PUT, PATCH, DELETEHMAC Secretklaviyo-signature, klaviyo-timestampNo setup challenge Customer.ioCUSTOMER_IOPOST, PUT, PATCH, DELETEWebhook Signing Keyx-cio-signature, x-cio-timestampNo setup challenge HygraphHYGRAPHGET, POST, PUT, DELETESecret Keygcms-signatureNo setup challenge SanitySANITYPOST, PUT, PATCH, DELETEWebhook Secretsanity-webhook-signatureNo setup challenge AfterShipAFTERSHIPPOST, PUT, PATCH, DELETEWebhook Secretaftership-hmac-sha256No setup challenge OpenAIOPENAIPOST, PUT, PATCH, DELETEWebhook Signing Secretwebhook-id, webhook-timestamp, webhook-signatureNo setup challenge NotionNOTIONPOST, PUT, PATCH, DELETEVerification Tokenx-notion-signatureNo setup challenge TwitchTWITCHPOST, PUT, PATCH, DELETEEventSub Secrettwitch-eventsub-message-id, twitch-eventsub-message-timestamp, twitch-eventsub-message-signature, twitch-eventsub-message-typeCallback challenge CloudinaryCLOUDINARYPOST, PUT, PATCH, DELETEAPI Secretx-cld-signature, x-cld-timestampNo setup challenge PaystackPAYSTACKPOST, PUT, PATCH, DELETESecret Keyx-paystack-signatureNo setup challenge GoCardlessGOCARDLESSPOST, PUT, PATCH, DELETEWebhook Endpoint Secretwebhook-signatureNo setup challenge PagerDutyPAGERDUTYPOST, PUT, PATCH, DELETEWebhook Signing Secretx-pagerduty-signatureNo setup challenge BigCommerceBIGCOMMERCEPOST, PUT, PATCH, DELETEClient Secretwebhook-id, webhook-timestamp, webhook-signatureNo setup challenge Chargebee RetentionCHARGEBEE_RETENTIONPOST, PUT, PATCH, DELETEShared Secretx-hub-signatureNo setup challenge Checkout.comCHECKOUT_COMPOST, PUT, PATCH, DELETESecret Keycko-signatureNo setup challenge

Custom

Generic FastHook sources for internal producers and providers without a preset.

WEBHOOKCustom WebhookUse a custom webhook source when the producer is an internal service, a provider FastHook does not have a preset for yet, a publish endpoint for outbound webhook messages, or a test client that can send ordinary HTTP requests.POST, PUT, PATCH, DELETEOptional Basic Auth, API key, or HMAC fields

Payments

Billing, checkout, subscription, and payment event producers.

STRIPEStripeStripe sources receive payment, billing, checkout, subscription, dispute, invoice, and customer events with endpoint-secret verification.POST, PUT, PATCH, DELETEWebhook Signing Secret PAYPALPayPalPayPal sources receive payment and checkout webhook events and verify PayPal's RSA transmission signature against the configured webhook id.POST, PUT, PATCH, DELETEWebhook ID PADDLEPaddlePaddle sources receive billing, subscription, transaction, product, and customer webhooks with Paddle-Signature verification.POST, PUT, PATCH, DELETEEndpoint Secret Key SQUARESquareSquare sources receive payment, order, customer, inventory, and subscription events with Square signature verification.POST, PUT, PATCH, DELETESignature Key COINBASE_COMMERCECoinbase CommerceCoinbase Commerce sources receive charge and payment webhooks and verify the Coinbase Commerce signature header.POST, PUT, PATCH, DELETEShared Secret RAZORPAYRazorpayRazorpay sources receive payment, order, subscription, invoice, payout, and settlement events with signature verification.POST, PUT, PATCH, DELETEWebhook Signing Secret LEMON_SQUEEZYLemon SqueezyLemon Squeezy sources receive order, subscription, license, and payment lifecycle events with x-signature verification.POST, PUT, PATCH, DELETEWebhook Signing Secret REVENUECATRevenueCatRevenueCat sources receive subscription and purchase lifecycle webhooks and verify the configured Authorization header value.POST, PUT, PATCH, DELETEAuthorization Header Value PAYSTACKPaystackPaystack sources receive transaction, transfer, subscription, refund, invoice, and dispute webhooks with Paystack signature verification.POST, PUT, PATCH, DELETESecret Key GOCARDLESSGoCardlessGoCardless sources receive payment, mandate, subscription, payout, and customer event webhooks with endpoint-secret verification.POST, PUT, PATCH, DELETEWebhook Endpoint Secret CHARGEBEE_RETENTIONChargebee RetentionChargebee Retention sources receive cancel experience, offer, survey, and retention workflow webhooks with shared-secret signing.POST, PUT, PATCH, DELETEShared Secret CHECKOUT_COMCheckout.comCheckout.com sources receive payment, dispute, payout, and account webhooks with Checkout.com signature verification.POST, PUT, PATCH, DELETESecret Key

Commerce

Storefront, order, fulfillment, shipment, and accounting webhook producers.

SHOPIFYShopifyShopify sources receive shop, order, product, fulfillment, inventory, customer, and app lifecycle webhooks with Shopify HMAC verification.POST, PUT, PATCH, DELETEWebhook Signing Secret XEROXeroXero sources receive accounting webhook events and verify Xero's intent-to-receive and delivery signatures.POST, PUT, PATCH, DELETEWebhook Signing Key WOO_COMMERCEWooCommerceWooCommerce sources receive order, product, customer, coupon, and subscription webhooks with WooCommerce signature verification.POST, PUT, PATCH, DELETEWebhook Signing Secret AFTERSHIPAfterShipAfterShip sources receive tracking, shipment, and delivery lifecycle webhooks with AfterShip HMAC verification.POST, PUT, PATCH, DELETEWebhook Secret BIGCOMMERCEBigCommerceBigCommerce sources receive store, order, cart, product, and customer HTTPS webhooks using Standard Webhooks verification.POST, PUT, PATCH, DELETEClient Secret

Developer tools

Repository, CI, deployment, feature flag, and developer workflow platforms.

GITHUBGitHubGitHub sources receive repository, organization, GitHub App, issue, pull request, workflow, deployment, and push events with raw-body signature verification.POST, PUT, PATCH, DELETEWebhook Signing Secret SVIXSvixSvix sources receive standard Svix-signed webhook traffic and are also useful for providers that expose Svix-compatible webhook signatures.POST, PUT, PATCH, DELETESigning Secret GITLABGitLabGitLab sources receive project and group webhook events. FastHook supports legacy secret tokens and GitLab's Svix-compatible signed webhooks.POST, PUT, PATCH, DELETESigning or Secret Token BITBUCKETBitbucketBitbucket sources receive repository, pull request, branch, tag, and build status webhooks with HMAC verification.POST, PUT, PATCH, DELETEWebhook Signing Secret VERCELVercelVercel sources receive account or integration webhooks for projects, deployments, teams, and integration events.POST, PUT, PATCH, DELETEOAuth2 Secret HEROKUHerokuHeroku sources receive app webhook events for releases, builds, formations, add-ons, domains, and app lifecycle changes.POST, PUT, PATCH, DELETESigning Secret BUILDKITEBuildkiteBuildkite sources receive pipeline, build, job, agent, and annotation webhooks with timestamped Buildkite signatures.POST, PUT, PATCH, DELETEWebhook Token CIRCLECICircleCICircleCI sources receive workflow and job webhooks and verify CircleCI's outbound webhook signature.POST, PUT, PATCH, DELETEWebhook Signing Secret LAUNCHDARKLYLaunchDarklyLaunchDarkly sources receive feature flag, environment, project, and account activity webhooks with signed payload verification.POST, PUT, PATCH, DELETEWebhook Signing Secret OPENAIOpenAIOpenAI sources receive API event webhooks such as response, batch, and fine-tuning lifecycle notifications using Standard Webhooks signatures.POST, PUT, PATCH, DELETEWebhook Signing Secret

Communication

Chat, messaging, voice, social, and collaboration webhook producers.

SLACKSlackSlack sources receive Events API callbacks and signed Slack requests, including the URL verification challenge Slack sends when a request URL is configured.POST, PUT, PATCH, DELETEWebhook Signing Secret TWILIOTwilioTwilio sources receive voice, messaging, status callback, and other Twilio webhook requests with Twilio's URL-aware signature model.POST, PUT, PATCH, DELETEAuth Token METAMetaMeta sources receive Facebook, Instagram, WhatsApp, and Graph API webhook notifications and answer the subscription verification challenge.GET, POSTApp Secret ZOOMZoomZoom sources receive Zoom webhook events, verify x-zm-signature, and answer endpoint.url_validation challenge payloads.POST, PUT, PATCH, DELETESecret Token DISCORDDiscordDiscord sources receive interaction callbacks, verify Ed25519 signatures, and answer PING validation with the required PONG response.POST, PUT, PATCH, DELETEApplication Public Key TELEGRAMTelegramTelegram sources receive Bot API webhook updates and verify Telegram's optional secret token header without reading the raw body.POST, PUT, PATCH, DELETESecret Token LINELINELINE sources receive Messaging API webhook events and verify the LINE channel secret signature.POST, PUT, PATCH, DELETEChannel Secret WEBEXWebexWebex sources receive room, message, meeting, membership, and resource events with Webex secret signature verification.POST, PUT, PATCH, DELETEWebhook Secret TWITCHTwitchTwitch sources receive EventSub webhook notifications, verify Twitch signatures, and answer callback verification challenges.POST, PUT, PATCH, DELETEEventSub Secret

Productivity

Support, scheduling, forms, project management, and workflow tools.

HUBSPOTHubSpotHubSpot sources receive CRM, app, object, and subscription callbacks with HubSpot request signature v3 verification.POST, PUT, PATCH, DELETEClient Secret DOCUSIGNDocuSignDocuSign sources receive Connect webhooks and verify one of the DocuSign HMAC signature headers.POST, PUT, PATCH, DELETEHMAC Key INTERCOMIntercomIntercom sources receive signed notification webhooks for conversations, contacts, admins, and workspace events.POST, PUT, PATCH, DELETEClient Secret LINEARLinearLinear sources receive issue, comment, project, cycle, and workspace events with Linear signature verification and provider header capture.POST, PUT, PATCH, DELETEWebhook Signing Secret TYPEFORMTypeformTypeform sources receive form response webhooks and verify Typeform's signed webhook header.POST, PUT, PATCH, DELETEWebhook Signing Secret CALENDLYCalendlyCalendly sources receive invitee, routing, and scheduling webhooks with timestamped signature verification.POST, PUT, PATCH, DELETEWebhook Signing Secret ASANAAsanaAsana sources receive task, project, portfolio, and workspace webhooks, answer the initial hook-secret handshake, and verify later event signatures.POST, PUT, PATCH, DELETEWebhook Signing Secret ZENDESKZendeskZendesk sources receive Support, Guide, Gather, and Messaging webhook activity with timestamped Zendesk signature verification.POST, PUT, PATCH, DELETEWebhook Signing Secret TRELLOTrelloTrello sources receive board, card, list, member, and action webhooks, answer Trello's callback URL HEAD validation, and verify webhook signatures.HEAD, POSTApplication Secret CLICKUPClickUpClickUp sources receive task, list, folder, goal, and workspace webhooks with x-signature verification.POST, PUT, PATCH, DELETEWebhook Signing Secret NOTIONNotionNotion sources receive page and database activity webhooks and verify each payload with the webhook verification token.POST, PUT, PATCH, DELETEVerification Token

Identity

Identity, directory, auth, and account lifecycle event streams.

MICROSOFT_GRAPHMicrosoft GraphMicrosoft Graph sources receive change notifications and answer validationToken checks when Graph creates or renews a subscription.POST, PUT, PATCH, DELETEOptional Client State OKTAOktaOkta sources receive event hook calls, answer the one-time verification challenge, and compare the configured Authorization header value.GET, POSTAuthorization Secret CLERKClerkClerk sources receive user, session, organization, email, and SMS events using Clerk's Svix-compatible webhook signatures.POST, PUT, PATCH, DELETEWebhook Signing Secret WORKOSWorkOSWorkOS sources receive organization, directory sync, audit log, and identity events with timestamped WorkOS signatures.POST, PUT, PATCH, DELETEWebhook Secret AUTH0Auth0Auth0 sources receive custom log stream webhook events and verify the optional Authorization token configured in Auth0.POST, PUT, PATCH, DELETEAuthorization Header Value

Email and messaging

Email delivery, customer messaging, and notification platforms.

SENDGRIDSendGridSendGrid sources receive signed Event Webhook traffic for delivered, bounced, opened, clicked, deferred, and processed email events.POST, PUT, PATCH, DELETEPublic Verification Key MAILGUNMailgunMailgun sources receive event and tracking webhooks and verify the Mailgun timestamp, token, and signature fields.POST, PUT, PATCH, DELETEHTTP Signing Key POSTMARKPostmarkPostmark sources receive message stream, bounce, open, click, delivery, and inbound webhooks using Basic Auth credentials.POST, PUT, PATCH, DELETEUsername RESENDResendResend sources receive email delivery, bounce, complaint, open, and click events with Svix-compatible signatures.POST, PUT, PATCH, DELETEWebhook Signing Secret NYLASNylasNylas sources receive notification webhooks, answer challenge checks, and verify x-nylas-signature over the raw body.GET, POSTWebhook Secret KLAVIYOKlaviyoKlaviyo sources receive system webhook events and verify Klaviyo's signature and timestamp headers.POST, PUT, PATCH, DELETEHMAC Secret CUSTOMER_IOCustomer.ioCustomer.io sources receive reporting and data-out webhooks with timestamped Customer.io signature verification.POST, PUT, PATCH, DELETEWebhook Signing Key

Content and data

Content, file, media, document, and data-change event producers.

AWS_SNSAWS SNSAWS SNS sources receive HTTP/S topic notifications, verify SNS RSA signatures, and can answer subscription confirmations.POST, PUT, PATCH, DELETEOptional Topic ARN DROPBOXDropboxDropbox sources receive file-change notifications, answer the required GET challenge, and verify Dropbox HMAC signatures.GET, POSTWebhook Signing Secret MUXMuxMux sources receive video, live stream, asset, track, and upload webhooks with timestamped Mux signatures.POST, PUT, PATCH, DELETEWebhook Signing Secret HYGRAPHHygraphHygraph sources receive content model and content entry webhooks across Hygraph's supported methods with signed gcms-signature verification.GET, POST, PUT, DELETESecret Key SANITYSanitySanity sources receive GROQ-powered content webhooks with timestamped Sanity webhook signature verification.POST, PUT, PATCH, DELETEWebhook Secret CLOUDINARYCloudinaryCloudinary sources receive upload, moderation, transformation, and other notification webhooks with timestamped Cloudinary signatures.POST, PUT, PATCH, DELETEAPI Secret

Observability

Alerting, incident, and monitoring webhook streams.

GRAFANAGrafanaGrafana sources receive Alerting webhook notifications and can verify Grafana's configured HMAC signature headers.POST, PUT, PATCH, DELETEWebhook Signing Secret SENTRYSentrySentry sources receive internal integration webhooks for issues, alerts, comments, metric alerts, and organization events.POST, PUT, PATCH, DELETEWebhook Signing Secret PAGERDUTYPagerDutyPagerDuty sources receive incident, service, escalation, and responder lifecycle webhooks with PagerDuty webhook v3 signatures.POST, PUT, PATCH, DELETEWebhook Signing Secret