twitch-webhooks

name	twitch-webhooks
description	Receive and verify Twitch EventSub webhooks. Use when setting up Twitch webhook handlers, debugging signature verification, handling the webhook_callback_verification challenge, or handling EventSub events like stream.online, stream.offline, channel.follow, channel.subscribe, and channel.channel_points_custom_reward_redemption.add.
license	MIT
metadata	{"author":"hookdeck","version":"0.1.0","repository":"https://github.com/hookdeck/webhook-skills"}

Twitch Webhooks

Twitch delivers events through EventSub over the webhook transport. Twitch does not follow the Standard Webhooks spec — it has its own signature scheme and a three-way message-type protocol you must handle.

When to Use This Skill

• How do I receive Twitch EventSub webhooks?
• How do I verify Twitch webhook signatures?
• How do I respond to the webhook_callback_verification challenge?
• How do I handle stream.online, channel.follow, or channel.subscribe events?
• Why is my Twitch webhook signature verification failing?

Verification (core)

Twitch signs an HMAC-SHA256 over the concatenation of the Twitch-Eventsub-Message-Id header, the Twitch-Eventsub-Message-Timestamp header, and the raw request body (in that order). The digest is sent in as . There is no SDK for the webhook transport, so verify manually. Use the body and compare timing-safe.