---
id: standardwebhooks
version: "1.1.0"
license: MIT
license_treatment: permissive
maintenance: active
---

# standardwebhooks — Standard Webhooks

License: permissive · Maintenance: active · Downloads: 2.6M/mo

## What it is and what it does

standardwebhooks is a Python library that implements webhook verification according to the Standard Webhooks specification. It takes a base64-encoded secret and validates incoming webhook payloads against their cryptographic signatures, ensuring that webhook requests are authentic and have not been tampered with. The library has no external runtime dependencies, making it lightweight to integrate into existing applications.

The package is designed for developers building webhook receivers or integrating with services that send Standard Webhooks-compliant notifications. It handles the cryptographic verification step that sits between receiving a webhook request and processing its payload, reducing the risk of accepting forged or corrupted webhook data.

Use it for:

- Verify incoming webhooks from third-party services to ensure they are authentic before processing.
- Validate webhook signatures in a webhook receiver endpoint to prevent accepting spoofed requests.
- Integrate webhook verification into an event-driven application that consumes Standard Webhooks.
- Add cryptographic validation to a webhook gateway or proxy layer.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Provides webhook payload verification and signing for the Standard Webhooks specification, allowing you to validate incoming webhook requests using base64-encoded secrets.

Yes. The package is actively maintained, has zero known vulnerabilities, carries a permissive MIT license, installs with no dependencies, and solves a concrete security problem (webhook verification) for a widely-adopted standard. It is well-suited for any Python application that needs to receive and validate Standard Webhooks.

## Install

pip install standardwebhooks
uv add standardwebhooks
poetry add standardwebhooks

## Installing standardwebhooks

Before you install: Low friction installation with no runtime dependencies. Actively maintained as of 24 days ago with support for current Python versions (3.9 through 3.14).

License in practice: MIT license permits free use, modification, and distribution with minimal restrictions, making it suitable for both open-source and commercial projects.

Quickstart:

pip install standardwebhooks

from standardwebhooks.webhooks import Webhook

wh = Webhook(base64_secret)
wh.verify(webhook_payload, webhook_headers)

Requires Python 3.9 or later.

Verify before relying:

- Whether the library supports both signing and verification, or verification only.
- What cryptographic algorithm the library uses for signature generation and validation.
- Whether it handles timestamp validation or replay attack prevention as part of Standard Webhooks spec.

## Package facts

- License: MIT (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 2.6M/month (top 5,000 on PyPI)
- Known vulnerabilities: none known

## Tags

webhook verification, webhook signature validation, standard webhooks library, webhook payload verification, webhook authentication, cryptographic webhook signing, webhook-security, signature-verification

[View on SkillFed](https://skillfed.io/packages/standardwebhooks) · [View on PyPI](https://pypi.org/project/standardwebhooks/)