Loading the webhook workbench
Jump to an email or domain, or change a setting.
The exact bytes that arrived. Anything that re-serialises the JSON on the way in changes the signature.
Shared with the Replay tab. It is sent to outbox's own server for the check and goes nowhere else.
Checks a request you captured earlier without it failing purely on age, so you can see whether the secret and the body were right.
The example body is email.scheduled. It carries no headers and no signature of its own, so checking it will fail — reading which failure you get is the point.
Paste the raw body and the three svix headers from a request, and outbox recomputes the signature the way Resend does, then names the exact thing that disagrees. The signing secret is used on outbox's own server and never leaves it.
Defaults to outbox's own sink, which captures whatever it receives. Point it at your handler when you are ready.
Sent as the exact bytes shown here, and signed over those same bytes.
Shared with the Verify tab. Used on outbox's own server to sign the request, and sent nowhere else.