Receive webhooks

Receive an inbound webhook, verify the provider's signature at ngrok's edge, and deliver it to the user's service - without writing verification code and, when wanted, without exposing the service publicly.

Before you start

Auth is required (ngrok-setup). This job uses a Traffic Policy - pull the verify-webhook and forward-internal mechanics, and the endpoint choice, from ngrok-engine.

Core pattern (every case)

Two actions in sequence:

1. verify-webhook - validate the signature (fails closed with 403 unless enforce: false).
2. deliver - to a local port for testing, or forward-internal to a private receiver for production.