Examples / Identity and security / Clerk

Clerk webhooks

User, session, organisation and membership events.

Events

user.created
user.updated
session.created
organizationMembership.created

Signature

Standard Webhooks via Svix: svix-id, svix-timestamp, svix-signature. HMAC-SHA256 of '<id>.<timestamp>.<raw body>' with the base64 secret after whsec_.

✓ A bin checks Clerk signatures: add the whsec_… secret under Signature verification (Svix headers (Resend, Clerk)).

Check a Clerk signature with the free tool (use the Standard Webhooks preset).

Retries

Svix schedule: immediately, 5 seconds, 5 minutes, 30 minutes, 2 hours, 5 hours, 10 hours, 10 hours.

See a retry schedule in the calculator.

Docs

clerk.com/docs/webhooks/overview

Checked 2026-10-08. Report a change.

Sample request from Clerkillustrative, shortened

Content-Typeapplication/jsonsvix-idmsg_2ZkV8aQ1xP0bYc3dE4fG5hJ6kL7msvix-timestamp1759924800svix-signaturev1,g0hM9SsE+OTPJTGt/tmIKtSyZlE3uFJELVlNIOLJ1OE=

{
  "type": "user.created",
  "object": "event",
  "timestamp": 1759924800000,
  "data": {
    "id": "user_2NNEqL2nrIRdJ194ndJqAHwEfxC",
    "email_addresses": [ { "email_address": "ravi@example.com", "verification": { "status": "verified" } } ],
    "first_name": "Ravi",
    "created_at": 1759924798000
  }
}

Receive Clerk webhooks with webhooks.xyz

Create a bin. Paste its URL into Clerk. Each request shows at once with its headers and body. Add your secret, and each request gets a verified or failed mark. Add your server as a destination, and deliveries retry when it is down. Request an invite.

More in identity and security: Auth0 Log Streams, Okta Event Hooks, Plaid.