Supabase Webhooks

When to Use This Skill

• How do I receive Supabase Database Webhooks (INSERT / UPDATE / DELETE)?
• How do I verify a Supabase Auth Hook signature?
• Why is my Supabase webhook-signature verification failing?
• How do I secure a Supabase Database Webhook when there is no signature?
• How do I implement a send_email / send_sms / custom_access_token Auth Hook?
• What does the v1,whsec_ secret prefix mean?

Two Surfaces, Two Security Models

Supabase sends outbound HTTP from two different systems. They do not share a security model — do not apply one's verification to the other.