{ "category": "Inbound webhook reliability and payload routing", "slug": "inbound-webhook-reliability", "publisher": "BuildStack.ai (AI FUTURE ASIA PTE LTD, Singapore)", "verified_on": "2026-10-19", "timezone": "Asia/Singapore", "count": 19, "notes": "Facts verified from official pricing/docs pages and the GitHub API on the verified_on date. 'unknown' means not verified, not absent. Prices are as stated by vendors and may change.", "listings": [ { "id": "hookdeck", "name": "Hookdeck Event Gateway", "url": "https://hookdeck.com", "type": "SaaS", "description": "Managed event gateway for receiving, verifying, queueing, filtering, transforming and routing inbound webhooks, with full request/event/attempt logs.", "github_url": "https://github.com/hookdeck/hookdeck-cli", "github_stars": 365, "github_note": "Stars are for the open-source CLI (Apache-2.0); the gateway itself is SaaS.", "license": "Apache-2.0 (CLI only)", "free_tier": "Yes: Developer plan $0/month, 10,000 events, 3-day retention, 1 user", "starting_price": "Team from $39/month (pay-as-you-go events); Growth from $499/month; Enterprise custom", "pricing_model": "Base plan + metered events ($3.00 per 100k up to 5M/month, tiered down); retries included in event price", "caps": { "retries": "yes", "signature_verification": "yes", "fan_out": "yes", "transformation": "yes", "replay": "yes", "observability": "yes", "agent_llm": "yes" }, "capability_notes": "Retries up to a week / 50 attempts; 180+ pre-configured Source Types with signature verification (incl. OpenAI, Claude, Gemini, ElevenLabs, Replicate); one Source fans out to many Connections; JS transformations; dedup; delivery rate limits and per-tenant delivery groups; Issues + Metrics (Datadog/New Relic/Prometheus export on Growth); destination timeouts up to 15 min for AI agents; MCP server and agent skills.", "best_fit": "Engineering teams consuming many third-party webhooks (Stripe, Shopify, GitHub, AI providers) who want a managed buffer in front of their app or agents.", "sources": [ "https://hookdeck.com/pricing", "https://hookdeck.com/docs/use-cases/ai-agents", "https://api.github.com/repos/hookdeck/hookdeck-cli" ], "github_stars_as_of": "2026-10-19" }, { "id": "svix", "name": "Svix (Ingest + Dispatch)", "url": "https://www.svix.com", "type": "Both", "description": "Webhooks platform: Svix Ingest for receiving webhooks at scale, Dispatch for sending, plus Play for testing; core server is open source.", "github_url": "https://github.com/svix/svix-webhooks", "github_stars": 3453, "github_note": "", "license": "MIT", "free_tier": "Yes: $0/month, up to 50k messages/month, 7-day retention, Ingest included", "starting_price": "Basic from $20/month; Professional from $490/month; Enterprise custom", "pricing_model": "Base plan + $0.0001 per additional message; retries and filtered messages free; each 64 KiB chunk billed as one message", "caps": { "retries": "yes", "signature_verification": "yes", "fan_out": "yes", "transformation": "yes", "replay": "yes", "observability": "yes", "agent_llm": "unknown" }, "capability_notes": "Ingest: automatic and manual retries, built-in webhook verification, configurable throttling for spikes, JS filter/transform/route. Dispatch: consumer portal, signature libraries, OpenTelemetry streaming (Enterprise), FIFO and broker/object-storage endpoints on higher tiers. Steering member of Standard Webhooks.", "best_fit": "SaaS vendors that both send webhooks to customers and receive third-party webhooks; teams wanting an MIT self-host option.", "sources": [ "https://www.svix.com/pricing/", "https://www.svix.com/ingest/", "https://api.github.com/repos/svix/svix-webhooks" ], "github_stars_as_of": "2026-10-19" }, { "id": "convoy", "name": "Convoy", "url": "https://getconvoy.io", "type": "Both", "description": "Cloud-native webhook gateway for sending outgoing and receiving incoming webhooks, self-hosted open source or Convoy Cloud.", "github_url": "https://github.com/frain-dev/convoy", "github_stars": 2880, "github_note": "", "license": "Custom/other (GitHub reports NOASSERTION)", "free_tier": "Yes: Community edition, self-hosted, $0 forever; 14-day Premium trial (Cloud trial: 100 events/day)", "starting_price": "Premium $999/month (self-hosted); Enterprise contact sales", "pricing_model": "Flat monthly price with throughput limits; no per-message metering", "caps": { "retries": "yes", "signature_verification": "unknown", "fan_out": "unknown", "transformation": "yes", "replay": "unknown", "observability": "yes", "agent_llm": "unknown" }, "capability_notes": "Incoming & outgoing webhooks, automatic retries, message broker support (Community); JS transformation, OpenTelemetry export, RBAC, endpoint circuit breaking, white-labelling (Premium).", "best_fit": "Platform teams that must run webhook infrastructure inside their own cloud/on-prem for data control and compliance.", "sources": [ "https://getconvoy.io/pricing", "https://api.github.com/repos/frain-dev/convoy" ], "github_stars_as_of": "2026-10-19" }, { "id": "webhookx", "name": "WebhookX", "url": "https://webhookx.io", "type": "Open source", "description": "Open-source webhook gateway (Go) for receiving, validating, transforming and delivering events at scale, with plugins.", "github_url": "https://github.com/webhookx-io/webhookx", "github_stars": 300, "github_note": "", "license": "Apache-2.0 (some features require a license)", "free_tier": "Yes: open source; free production licenses for eligible non-commercial use", "starting_price": "unknown (commercial license pricing not published)", "pricing_model": "Open core with license-gated features", "caps": { "retries": "yes", "signature_verification": "yes", "fan_out": "yes", "transformation": "yes", "replay": "unknown", "observability": "unknown", "agent_llm": "unknown" }, "capability_notes": "Automatic retries with configurable delays; fan-out by event type; rate limiting; JSON Schema event validation; hmac-auth/basic-auth/key-auth inbound plugins; JS function plugin for custom signature verification; WASM transforms; HMAC-signed outbound.", "best_fit": "Teams wanting a self-hosted, Kong-style gateway for webhooks.", "sources": [ "https://raw.githubusercontent.com/webhookx-io/webhookx/main/README.md", "https://api.github.com/repos/webhookx-io/webhookx" ], "github_stars_as_of": "2026-10-19" }, { "id": "qstash", "name": "Upstash QStash", "url": "https://upstash.com/docs/qstash", "type": "SaaS", "description": "Serverless HTTP message queue and scheduler that durably delivers messages to your endpoints with retries, DLQ and URL-group fan-out.", "github_url": "https://github.com/upstash/qstash-js", "github_stars": 270, "github_note": "Stars are for the JS SDK (MIT); QStash itself is SaaS.", "license": "MIT (SDK)", "free_tier": "Yes: $0/month, 1,000 messages/day", "starting_price": "Pay-as-you-go $1 per 100K messages; Fixed 1M $180/month; Fixed 10M $420/month; Enterprise custom", "pricing_model": "Per-message (PAYG) or fixed daily-capacity plans. Note: page header says retries are free, but its FAQ says each delivery attempt (incl. retries) is billed — confirm with vendor.", "caps": { "retries": "yes", "signature_verification": "unknown", "fan_out": "yes", "transformation": "unknown", "replay": "unknown", "observability": "yes", "agent_llm": "unknown" }, "capability_notes": "DLQ (3 days–3 months by plan), URL groups/topics for fan-out, delays up to 1 year+, parallelism limits instead of RPS caps, Prometheus/Datadog via Prod Pack add-on.", "best_fit": "Serverless/edge apps (Vercel, Cloudflare) that need to buffer an inbound webhook and re-deliver it reliably to a function.", "sources": [ "https://upstash.com/pricing/qstash", "https://api.github.com/repos/upstash/qstash-js" ], "github_stars_as_of": "2026-10-19" }, { "id": "eventbridge", "name": "Amazon EventBridge", "url": "https://aws.amazon.com/eventbridge/", "type": "SaaS", "description": "AWS serverless event bus with partner event buses for SaaS events, API destinations for HTTP delivery, Pipes for filter/transform/enrich, and archive & replay.", "github_url": "", "github_stars": null, "github_note": "", "license": "Proprietary (AWS)", "free_tier": "Partial: AWS management events ingested free; Scheduler free tier 14M invocations/month; Schema Discovery 5M events/month free", "starting_price": "No minimum; e.g. classic custom events $1.00 per million; API destinations $0.20 per million; Pipes $0.40 per million requests (as stated in examples)", "pricing_model": "Pure usage-based, billed per event / 64 KB chunk", "caps": { "retries": "yes", "signature_verification": "unknown", "fan_out": "yes", "transformation": "yes", "replay": "yes", "observability": "unknown", "agent_llm": "unknown" }, "capability_notes": "Rules fan out to many targets; retry policies; JSONata transformation and schema validation on enhanced buses; Pipes filter/enrich; archive & replay; API destinations deliver to any HTTPS endpoint incl. via PrivateLink.", "best_fit": "AWS-native organisations routing SaaS and internal events across accounts.", "sources": [ "https://aws.amazon.com/eventbridge/pricing/" ], "github_stars_as_of": null }, { "id": "inngest", "name": "Inngest", "url": "https://www.inngest.com", "type": "Both", "description": "Durable workflow/agent orchestration platform that can receive provider webhooks directly, transform them into events and start durable functions.", "github_url": "https://github.com/inngest/inngest", "github_stars": 5959, "github_note": "", "license": "Custom/other (GitHub reports NOASSERTION)", "free_tier": "Yes: $0/month, 50k executions, 500k events ingested", "starting_price": "Pro from $99/month; Business from $499/month; Enterprise custom", "pricing_model": "Plan + metered executions/events/concurrency; self-hosting available", "caps": { "retries": "yes", "signature_verification": "no", "fan_out": "unknown", "transformation": "yes", "replay": "unknown", "observability": "yes", "agent_llm": "yes" }, "capability_notes": "Webhook URLs with server-side transforms, content-type support, request filtering and branch-environment routing. Docs state Inngest does NOT verify provider webhook signatures — your function must. Step-level retries, traces, durable agents.", "best_fit": "TypeScript/Python teams that want webhooks to directly trigger durable, retried workflows and AI agents without a webhook handler.", "sources": [ "https://www.inngest.com/pricing", "https://www.inngest.com/docs/platform/webhooks", "https://api.github.com/repos/inngest/inngest" ], "github_stars_as_of": "2026-10-19" }, { "id": "triggerdev", "name": "Trigger.dev", "url": "https://trigger.dev", "type": "Both", "description": "Open-source platform for durable background tasks and AI agents; Webhooks (private beta) receive provider webhooks on hosted, verified endpoints and route them to tasks, agents and waiting runs.", "github_url": "https://github.com/triggerdotdev/trigger.dev", "github_stars": 16570, "github_note": "", "license": "Apache-2.0", "free_tier": "Yes: $0/month with $5/month free credits, 20 concurrent runs", "starting_price": "Hobby $10/month; Pro $50/month; Enterprise custom", "pricing_model": "Plan with included credits + per-second compute + $0.25 per 10,000 runs", "caps": { "retries": "yes", "signature_verification": "yes", "fan_out": "unknown", "transformation": "unknown", "replay": "unknown", "observability": "yes", "agent_llm": "yes" }, "capability_notes": "Webhooks feature is private beta: hosted verified endpoints, sources & verification, filters, waiters, session routing to agents. Durable tasks with no timeouts, alerts, log retention by plan, Realtime streaming.", "best_fit": "TypeScript teams running long-lived AI agents that must be woken by external events (Slack, Linear, Stripe, GitHub).", "sources": [ "https://trigger.dev/pricing", "https://trigger.dev/docs/webhooks/overview", "https://api.github.com/repos/triggerdotdev/trigger.dev" ], "github_stars_as_of": "2026-10-19" }, { "id": "hatchet", "name": "Hatchet", "url": "https://hatchet.run", "type": "Both", "description": "Open-source orchestration engine for background tasks, AI agents and durable workflows, with webhook endpoints that trigger runs.", "github_url": "https://github.com/hatchet-dev/hatchet", "github_stars": 8139, "github_note": "", "license": "MIT", "free_tier": "Yes: 1M runs and 1M events free every month", "starting_price": "Pay-as-you-go: $30 per million runs, $5 per million events after free tier; custom plans for 100M+ runs", "pricing_model": "Usage-based; retries not billed", "caps": { "retries": "yes", "signature_verification": "yes", "fan_out": "unknown", "transformation": "unknown", "replay": "unknown", "observability": "yes", "agent_llm": "yes" }, "capability_notes": "Webhooks with basic auth, API key or HMAC validation (algorithm/encoding configurable) mapped to event keys via CEL; retry policies, rate limits, concurrency, idempotency; OpenTelemetry and Prometheus metrics.", "best_fit": "Teams replacing Celery/Temporal who want webhooks to start durable, rate-limited agent workflows.", "sources": [ "https://hatchet.run/pricing", "https://docs.hatchet.run/home/webhooks", "https://api.github.com/repos/hatchet-dev/hatchet" ], "github_stars_as_of": "2026-10-19" }, { "id": "ngrok", "name": "ngrok", "url": "https://ngrok.com", "type": "SaaS", "description": "Ingress/API gateway that gives local or private services public HTTPS endpoints, with traffic inspection, webhook replay and a verify-webhook traffic policy action.", "github_url": "https://github.com/ngrok/ngrok-go", "github_stars": 880, "github_note": "Stars are for the open-source Go SDK (MIT); the ngrok service is SaaS.", "license": "MIT (ngrok-go SDK)", "free_tier": "Yes: $0 with $5 one-time usage credit, 3 endpoints, 20k HTTP/S requests", "starting_price": "Hobbyist $10/month; Pay-as-you-go $20/month + usage; Enterprise custom", "pricing_model": "Plan with included usage credit + metered requests/data transfer/endpoint hours", "caps": { "retries": "unknown", "signature_verification": "yes", "fan_out": "unknown", "transformation": "unknown", "replay": "yes", "observability": "yes", "agent_llm": "yes" }, "capability_notes": "Test webhooks on localhost; Traffic Inspector shows headers/body/response and lets you replay requests; verify-webhook Traffic Policy action validates provider signatures at the edge; AI Gateway and MCP connectivity listed in product nav. Not a durable queue.", "best_fit": "Developers building and debugging webhook handlers locally; teams wanting edge signature verification before traffic reaches the app.", "sources": [ "https://ngrok.com/pricing", "https://ngrok.com/use-cases/webhook-testing", "https://api.github.com/repos/ngrok/ngrok-go" ], "github_stars_as_of": "2026-10-19" }, { "id": "webhook-site", "name": "Webhook.site", "url": "https://webhook.site", "type": "Both", "description": "Instant unique URLs and email addresses to inspect, test, transform and forward webhooks; Custom Actions add workflows on every hit.", "github_url": "https://github.com/webhooksite/webhook.site", "github_stars": 6775, "github_note": "", "license": "Custom/other (GitHub reports NOASSERTION)", "free_tier": "Yes: free URLs expire after 7 days and accept a limited number of requests", "starting_price": "Basic $9/month; Pro $19/month; Enterprise $69/month (USD, excl. VAT)", "pricing_model": "Flat subscription, no per-execution fee", "caps": { "retries": "unknown", "signature_verification": "unknown", "fan_out": "unknown", "transformation": "yes", "replay": "yes", "observability": "yes", "agent_llm": "unknown" }, "capability_notes": "Real-time request inspector, Replay/Redirect/XHR actions, Custom Actions to transform and forward, CLI forwarding to localhost, CSV export, API. FAQ cites 400,000 monthly unique users (Nov 2025).", "best_fit": "Developers and QA testing webhook integrations; light production forwarding.", "sources": [ "https://docs.webhook.site/pro.html", "https://docs.webhook.site/", "https://api.github.com/repos/webhooksite/webhook.site" ], "github_stars_as_of": "2026-10-19" }, { "id": "smee", "name": "smee.io", "url": "https://smee.io", "type": "Both", "description": "Free webhook payload delivery service from the Probot team that proxies payloads to your locally running app over Server-Sent Events.", "github_url": "https://github.com/probot/smee-client", "github_stars": 561, "github_note": "Stars are for smee-client.", "license": "ISC (client)", "free_tier": "Yes: free hosted service", "starting_price": "Free", "pricing_model": "Free", "caps": { "retries": "no", "signature_verification": "no", "fan_out": "no", "transformation": "no", "replay": "unknown", "observability": "unknown", "agent_llm": "no" }, "capability_notes": "Development-only localhost forwarding, popular with GitHub App/Probot developers.", "best_fit": "Developers testing GitHub and other webhooks locally.", "sources": [ "https://smee.io", "https://api.github.com/repos/probot/smee-client" ], "github_stars_as_of": "2026-10-19" }, { "id": "n8n", "name": "n8n", "url": "https://n8n.io", "type": "Both", "description": "Fair-code workflow automation with Webhook and Respond to Webhook nodes plus native AI agent, MCP and LLM nodes.", "github_url": "https://github.com/n8n-io/n8n", "github_stars": 207961, "github_note": "", "license": "Fair-code (GitHub reports NOASSERTION)", "free_tier": "Self-hosted community edition; cloud plans offer free trial", "starting_price": "Starter €20/month billed annually (2.5K executions); Pro €50/month billed annually; Business €667/month billed annually", "pricing_model": "Per workflow execution, unlimited steps/users", "caps": { "retries": "unknown", "signature_verification": "unknown", "fan_out": "yes", "transformation": "yes", "replay": "unknown", "observability": "yes", "agent_llm": "yes" }, "capability_notes": "Webhook trigger node, Respond to Webhook, Switch/If routing, Code and AI Transform nodes, AI agents and MCP Server/Client nodes, insights on paid tiers.", "best_fit": "Technical ops teams building webhook-triggered AI automations, self-hosted or cloud.", "sources": [ "https://n8n.io/pricing/", "https://docs.n8n.io/integrations/builtin/core-nodes/n8n-nodes-base.webhook/", "https://api.github.com/repos/n8n-io/n8n" ], "github_stars_as_of": "2026-10-19" }, { "id": "zapier-webhooks", "name": "Webhooks by Zapier", "url": "https://zapier.com/apps/webhook/integrations", "type": "SaaS", "description": "Catch Hook / Catch Raw Hook triggers that give each Zap a unique URL to receive webhooks and route the payload into 9,000+ apps.", "github_url": "", "github_stars": null, "github_note": "", "license": "Proprietary", "free_tier": "Plan-dependent: help center lists webhook triggers on Free, Professional, Team and Enterprise; pricing page lists 'Webhooks' as a Professional feature — confirm", "starting_price": "Professional from $19.99/month; Team from $69/month", "pricing_model": "Per-plan task allowances", "caps": { "retries": "unknown", "signature_verification": "unknown", "fan_out": "unknown", "transformation": "yes", "replay": "yes", "observability": "unknown", "agent_llm": "yes" }, "capability_notes": "Catch Raw Hook includes headers and unparsed body (max 2 MB); Autoreplay listed in plan features; multi-step Zaps transform/route data; Zapier MCP and Agents products.", "best_fit": "Ops and no-code teams routing inbound webhooks into business apps.", "sources": [ "https://help.zapier.com/hc/en-us/articles/8496288690317-Trigger-Zaps-from-webhooks", "https://zapier.com/pricing" ], "github_stars_as_of": null }, { "id": "pipedream", "name": "Pipedream", "url": "https://pipedream.com", "type": "Both", "description": "Integration platform with 3,000+ connectors, prebuilt triggers and MCP servers for adding integrations and event triggers to apps and AI agents.", "github_url": "https://github.com/PipedreamHQ/pipedream", "github_stars": 11752, "github_note": "Repo contains the open-source components/connectors.", "license": "Custom/other (GitHub reports NOASSERTION)", "free_tier": "Yes: $0, every feature in development (no production)", "starting_price": "Startup $99/month billed annually ($150 monthly); Business custom", "pricing_model": "Plan + external users ($2 each over 100) + usage credits ($0.012 each over 10,000)", "caps": { "retries": "unknown", "signature_verification": "unknown", "fan_out": "unknown", "transformation": "unknown", "replay": "unknown", "observability": "unknown", "agent_llm": "yes" }, "capability_notes": "10,000+ prebuilt tools and triggers; deployed triggers emit events; MCP servers and Connect proxy for agents; SOC 2 Type 2. Webhook-specific reliability features not verified.", "best_fit": "Product teams embedding third-party integrations and event triggers into their own app or agent.", "sources": [ "https://pipedream.com/pricing", "https://api.github.com/repos/PipedreamHQ/pipedream" ], "github_stars_as_of": "2026-10-19" }, { "id": "windmill", "name": "Windmill", "url": "https://www.windmill.dev", "type": "Both", "description": "Open-source developer platform that auto-generates webhook endpoints for every script and flow, turning scripts into webhooks, workflows and UIs.", "github_url": "https://github.com/windmill-labs/windmill", "github_stars": 18219, "github_note": "", "license": "Custom/other (GitHub reports NOASSERTION)", "free_tier": "Yes: open source, self-host, unlimited executions", "starting_price": "Enterprise listed 'from $120/mo' (seat-based)", "pricing_model": "Free OSS + seat-based Enterprise (developers / operators)", "caps": { "retries": "unknown", "signature_verification": "yes", "fan_out": "unknown", "transformation": "yes", "replay": "unknown", "observability": "yes", "agent_llm": "unknown" }, "capability_notes": "Async, sync and SSE webhook endpoints per script/flow; version-pinned flow webhooks; raw_string payload for DIY signature verification; multipart uploads; run history in Runs menu.", "best_fit": "Internal-tools and platform teams wanting code-first webhook handlers without deploying services.", "sources": [ "https://www.windmill.dev/pricing", "https://www.windmill.dev/docs/core_concepts/webhooks", "https://api.github.com/repos/windmill-labs/windmill" ], "github_stars_as_of": "2026-10-19" }, { "id": "hook0", "name": "Hook0", "url": "https://www.hook0.com", "type": "Both", "description": "Open-source (SSPL-1.0) webhook server and EU-hosted cloud for providing webhooks to your users, with retries, HMAC signing and delivery logs.", "github_url": "https://github.com/hook0/hook0", "github_stars": 1499, "github_note": "", "license": "SSPL-1.0 (per vendor pricing page)", "free_tier": "Yes: Developer plan free forever, up to 100 events/day, 7-day retention", "starting_price": "Startup €59/month; Pro €190/month; dedicated on-prem Pro €1,000 setup + €500/month", "pricing_model": "Plan tiers with daily event quotas; overage billed per event (never blocked on paid plans); retries free", "caps": { "retries": "yes", "signature_verification": "yes", "fan_out": "yes", "transformation": "unknown", "replay": "unknown", "observability": "yes", "agent_llm": "unknown" }, "capability_notes": "Outbound-focused (sending). One event can trigger multiple subscriptions; free retries; HMAC signatures; delivery monitoring; EU hosting (France) by default; static source IPs on demand.", "best_fit": "EU-centric SaaS vendors that need to offer webhooks to customers with data sovereignty.", "sources": [ "https://www.hook0.com/pricing", "https://www.hook0.com/", "https://api.github.com/repos/hook0/hook0" ], "github_stars_as_of": "2026-10-19" }, { "id": "hookdeck-outpost", "name": "Hookdeck Outpost", "url": "https://hookdeck.com/outpost", "type": "Both", "description": "Open-source outbound webhooks and event-destinations infrastructure from Hookdeck, self-hosted or managed.", "github_url": "https://github.com/hookdeck/outpost", "github_stars": 1067, "github_note": "", "license": "Apache-2.0", "free_tier": "Yes: self-hosted always free; managed first 50k events free", "starting_price": "Starter $10 per million events; Growth from $499/month + $10 per million events; Enterprise custom", "pricing_model": "Per-million events, plus Growth base fee", "caps": { "retries": "unknown", "signature_verification": "unknown", "fan_out": "yes", "transformation": "unknown", "replay": "unknown", "observability": "yes", "agent_llm": "unknown" }, "capability_notes": "Outbound/adjacent: event destinations, tenants, topics and filters, user portal, OpenTelemetry; multi-region (US, EU, Asia) on Growth.", "best_fit": "SaaS vendors adding outbound webhooks/event destinations for their customers.", "sources": [ "https://hookdeck.com/outpost/pricing", "https://api.github.com/repos/hookdeck/outpost" ], "github_stars_as_of": "2026-10-19" }, { "id": "standard-webhooks", "name": "Standard Webhooks", "url": "https://www.standardwebhooks.com", "type": "Open source", "description": "Open specification and libraries for sending and verifying webhooks securely and consistently (signatures, timestamps, replay protection).", "github_url": "https://github.com/standard-webhooks/standard-webhooks", "github_stars": 1776, "github_note": "", "license": "Apache-2.0", "free_tier": "Free (specification + libraries)", "starting_price": "Free", "pricing_model": "Not applicable", "caps": { "retries": "no", "signature_verification": "yes", "fan_out": "no", "transformation": "no", "replay": "no", "observability": "no", "agent_llm": "no" }, "capability_notes": "Spec covers security against SSRF, spoofing and replay attacks plus interoperability; steering committee includes engineers from Zapier, Twilio, Lob, Mux, ngrok, Supabase, Svix and Kong.", "best_fit": "Any vendor emitting webhooks or engineer writing a verifier.", "sources": [ "https://www.standardwebhooks.com", "https://api.github.com/repos/standard-webhooks/standard-webhooks" ], "github_stars_as_of": "2026-10-19" } ] }