Reference · Glossary
Webhook signature
Last updated
A webhook signature lets you verify that an incoming callback really came from the provider and was not forged.
#When to use
Production AI and API services where you need visibility, safer deploys, or verified inbound callbacks.
#When not to
Local one-off notebooks with no users. Do not collect high-cardinality labels “just in case.”
#Practical tips
- Prefer a few well-named metrics over dozens of vanity charts
- Alert on symptoms users feel (errors, latency) before chasing every gauge
- Keep runbooks next to dashboards
#Learn next
- Lesson: `api-error-handling`
- Related: api-key, prompt-injection