VanaraVANARAagentsStar9Subscribe — $10/mo
proskillv2.0.0✓ verified

webhook-design

Design and consume webhooks reliably — HMAC signature verification, timestamp/replay protection, fast 2xx acknowledgement, consumer idempotency via event-id dedupe, at-least-once delivery, retries with exponential backoff + dead-letter, ordering, and payload design. Deep reference with runnable checks.

$npx vanara install webhook-design

Included with Vanara Pro ($10/mo) — unlocks all 213 items. See pricing →

Overview

A webhook is a reversed API call: the provider calls you. That inversion changes every assumption. The payload is untrusted (anyone who learns your URL can POST to it), delivery is at-least-once (you *will* see duplicates), traffic is bursty (a backfill can fan out thousands of events in seconds), and ordering is not guaranteed. This skill is the deep reference for designing both sides — the produ

What it covers

Details

Tier
Pro — $10/mo
Version
2.0.0
Depth
4 references · 2 examples · 1 runnable scripts
Verification
1/1 runnable checks passing ✓ · last verified 2026-08-27pass-rate over the last 30 verification runs (2026-07-29 → 2026-08-27)
Runs on
Your own Claude Code — no API keys
api-paginationImplement correct, fast API pagination — cursor vs offset trade-offs, opaque cursor encoding, stable sort keys, page-size limits, total-count costs, and consumer-side iteration that survives inserts, deletes, and retries. With runnable cursor checks.app-store-optimizationHow to optimize an app-store listing (ASO) for discovery and conversion — title, subtitle, keywords, screenshots, icon, ratings, and the metadata that drives installs. A deep reference with worked Apple and Google listings and a runnable listing linter.audit-loggingDesign tamper-evident audit logs that satisfy security and compliance — what to record (who/what/when/where/outcome), what to never log (secrets/PII), structured immutable events, hash-chaining for tamper-evidence, retention, and access control. A deep reference with runnable validation.background-jobsDesign background job systems that don't lose or double work — enqueue-after-commit, retry policies with jitter, idempotent handlers, visibility timeouts, priority lanes, scheduled and recurring jobs, worker scaling, and observability for async work. With a runnable retry-policy check.backup-and-recoveryDesign and operate a tested backup and disaster-recovery strategy — the 3-2-1 rule, RPO/RTO targets, full vs incremental vs differential, point-in-time recovery, encryption, offsite/immutable copies, retention, and the restore drills that prove a backup actually works.c4-diagrammingDocument software architecture with the C4 model (Context, Container, Component, Code) as text-based diagrams in version control. Covers the four abstraction levels, notation discipline, when to draw each level (and when to stop), supplementary diagrams, and Mermaid/Structurizr tooling.
← All skills