Webhooks and APIIntegrations

Svix (generic)

One mode for every SaaS that ships webhooks via Svix

Svix is the hosted webhook platform behind many modern SaaS products, including Clerk and Resend. The Clerk and Resend chips under Dedicated providers select this mode. They all sign with the same headers (svix-id, svix-timestamp, svix-signature), so one Wexio mode covers every Svix-powered provider.

If your sender has a dedicated page (Clerk or Resend), follow that page. For other Svix senders, use this guide.

Provider docs: Setting up webhooks in Svix

Before You Start

Check the signature headers in the provider's webhook documentation. If you see all three, the provider uses Svix.

  • svix-id
  • svix-timestamp
  • svix-signature (with one or more v1,<base64> entries)

The signing secret usually starts with whsec_. Known Svix-powered providers (not a full list) are Clerk and Resend, plus any SaaS that lists "powered by Svix" in its webhook docs.

Setup

1. Connect It in Wexio

Go to New connection → Inbound and click the Clerk or Resend chip under Dedicated providers, or set Authentication mode to Svix (Clerk, Resend, Orb, Knock, Dub, …). Copy the Wexio endpoint URL.

2. Set Up the Provider

In the provider's dashboard, create a webhook, endpoint or subscription that points at the Wexio URL. The provider shows the signing secret (usually whsec_…). Copy it into the Wexio Signing secret field.

3. Resolve Contacts

This depends on the provider. Look at a sample payload (use Capture schema and inject a sample, or let a real event land) and pick the field that matches a Wexio contact.

4. Capture the Schema and Bind a Flow

Capture the schema, then attach a Webhook Received trigger. Branch on the provider's event type field.

Timestamp Tolerance

Svix rejects signatures older than ±5 minutes, and Wexio mirrors that. Providers rotate signing secrets by delivering several v1,<base64> values. Wexio accepts any matching v1 entry during the rotation window.

Troubleshooting

SymptomFix
UNAUTHORIZED: Svix signature mismatchYou copied the wrong secret. Paste the secret that starts with whsec_, and keep the whsec_ prefix
UNAUTHORIZED: Svix timestamp outside ±5 min toleranceThis is an old replay. Let the provider stop retrying
Multiple signature lines in the headerThis is normal during rotation. Wexio accepts any match

Was this page helpful?

Tipalti

Receive Tipalti webhook events through a proxy

Clerk

Receive Clerk user-management events

On this page

Before You StartSetup1. Connect It in Wexio2. Set Up the Provider3. Resolve Contacts4. Capture the Schema and Bind a FlowTimestamp ToleranceTroubleshootingRelated