Cloudflare Worker · Edge

Webhook Gate ●

Hardened webhook intake running at the edge — signature, replay and burst protection before anything reaches the origin.

HMAC-SHA256 signatureenforced

Replay window±300s

Event dedup (KV)24h

Rate limit (KV)30 req / 60s / IP

POST /webhook · headers: x-signature, x-timestamp, x-event-id