Paddle Webhooks

If you're wiring up Paddle payment webhooks, this handles the HMAC-SHA256 signature verification that trips people up. The tricky bit is that Paddle signs over the raw body with a timestamp prefix, and you'll see multiple h1 values during secret rotation. It includes verification snippets for Node and Python, plus pointers to full Express, Next.js, and FastAPI examples. Covers the subscription lifecycle events you actually care about like subscription.created, transaction.completed, and payment failures. Ships with a Hookdeck CLI command for local testing without ngrok. Pair it with the webhook-handler-patterns skill if you need idempotency and retry logic, because Paddle will hammer your endpoint if you're not careful with response codes.

Install to Claude Code

npx -y skills add hookdeck/webhook-skills --skill paddle-webhooks --agent claude-code