How to Test Clerk Webhooks

{
  "type": "user.created",
  "data": {
    "id": "user_2mK3vP2a91",
    "first_name": "Ava",
    "last_name": "Johnson",
    "email_addresses": [
      {
        "email_address": "ava@example.com"
      }
    ]
  },
  "object": "event",
  "timestamp": 1763582500000
}

// npm install svix — official SDK that handles header parsing.
import { Webhook } from 'svix';
import express from 'express';

const app = express();

app.post(
  '/webhooks/clerk',
  express.raw({ type: 'application/json' }),
  (req, res) => {
    const wh = new Webhook(process.env.CLERK_WEBHOOK_SECRET!); // 'whsec_...'
    try {
      const event = wh.verify(req.body, {
        'svix-id': req.headers['svix-id'] as string,
        'svix-timestamp': req.headers['svix-timestamp'] as string,
        'svix-signature': req.headers['svix-signature'] as string,
      });
      // event.type, event.data — verified
      res.json({ ok: true, type: (event as { type: string }).type });
    } catch {
      res.status(403).send('invalid signature');
    }
  },
);

# pip install svix — official SDK.
import os
from svix.webhooks import Webhook, WebhookVerificationError
from fastapi import FastAPI, Request, HTTPException

app = FastAPI()

@app.post("/webhooks/clerk")
async def clerk_webhook(request: Request):
    body = await request.body()
    headers = {
        'svix-id': request.headers.get('svix-id'),
        'svix-timestamp': request.headers.get('svix-timestamp'),
        'svix-signature': request.headers.get('svix-signature'),
    }
    try:
        wh = Webhook(os.environ['CLERK_WEBHOOK_SECRET'])  # 'whsec_...'
        event = wh.verify(body, headers)
    except WebhookVerificationError:
        raise HTTPException(status_code=403, detail='invalid signature')
    return {'ok': True, 'type': event.get('type')}