slash-webhook-signature header, taken over the raw request body.
We are rotating the signing key. Deliveries stay on the current key through October 4, 2026. Starting October 5, 2026, deliveries are signed with the new key. Until you have confirmed that new deliveries verify with the new key, accept a signature that matches either public key below. After October 5, 2026, you can remove the current key.
Public RSA Key
Slash signs every webhook with RSA-SHA256. The signature is the base64 value of the