# Webhooks

> Webhook management with HMAC signing and rate limiting Use when this capability is needed.

- Skill: `tomevault-io/webhooks` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/webhooks`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/webhooks/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Integrations & APIs
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/webhooks

---


# Webhooks

Register, manage, and inspect incoming webhook endpoints with optional HMAC-SHA256 signature verification.

## Commands

```
/webhooks list                              - List all registered webhooks
/webhooks register <id> <path>              - Register a webhook endpoint
/webhooks register <id> <path> --secret <key> - Register with HMAC secret
/webhooks unregister <id>                   - Remove a webhook
/webhooks enable <id>                       - Enable a webhook
/webhooks disable <id>                      - Disable a webhook
/webhooks get <id>                          - View webhook details
```

## Examples

```
/webhooks list
/webhooks register trade-signals /hooks/trades
/webhooks register alerts /hooks/alerts --secret mysecretkey
/webhooks get trade-signals
/webhooks disable trade-signals
/webhooks enable trade-signals
/webhooks unregister trade-signals
```

## Webhook Details

The `/webhooks get <id>` command shows:

- Path the webhook listens on
- Description (if set)
- Enabled/disabled status
- Whether an HMAC secret is configured
- Total trigger count

## Security

Webhooks support HMAC-SHA256 payload verification. Pass `--secret <key>` when registering to enable signature validation on incoming requests.

---
> Converted and distributed by [TomeVault](https://tomevault.io/claim/alsk1992) — claim your Tome and manage your conversions.
<!-- tomevault:4.0:skill_md:2026-04-11 -->