> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tensorlake.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Verify Webhook Signatures

> Verify the Svix signature on every Tensorlake webhook before accepting or processing its payload.

Every Tensorlake webhook delivery is signed by Svix with the destination's
signing secret. Make sure you verify the signature before parsing or processing the event.

## Get the signing secret

1. Open your project in [Tensorlake Cloud](https://cloud.tensorlake.ai).
2. Select **Webhooks** and open the destination.
3. Under **Signing secret**, copy the value beginning with `whsec_`.
4. Store the secret in your application's secret manager.

## Verify a request

Svix includes these headers with each delivery:

* `svix-id`
* `svix-timestamp`
* `svix-signature`

You can use an [official Svix library](https://docs.svix.com/receiving/verifying-payloads/how)
to verify the **raw request body** and the request headers with your signing
secret.

Reject requests with missing or invalid signature headers. After successful
verification, parse the returned payload as the appropriate
[lifecycle event](./events).

For implementations that cannot use an official library, follow Svix's
[manual verification procedure](https://docs.svix.com/receiving/verifying-payloads/how-manual).