Does this webhook signature verify?
Paste the raw body, the signing secret, and the X-Endorsed-Signature header. The check runs in your browser. No account required.
Not legal advice. This tool checks the public HMAC contract only. It does not deliver a webhook and it does not replace the verification step on your server.
Ready to receive signed events?
Claim a sandbox, register an endpoint, and verify every delivery with the same header this tool checks.