Webhook Security & Testing
~2 minutes
3. Verify Inbound Webhook Payloads & Bearer/HMAC Auth
Before connecting live ads, phone lines, or Stripe/CRM triggers, send a synthetic test payload to your n8n/Make test webhook URL to confirm every downstream JSON field maps cleanly.
curl -X POST https://your-n8n.example.com/webhook-test/medspa-missed-call-sms \
-H "Content-Type: application/json" \
-d '{"caller":"+15125550199","missed_at":"2026-10-17T19:00:00Z","clinic":"Glow MedSpa"}'
Production Tip: Use Header Auth or HMAC signature verification on production webhook nodes so unauthenticated scanners cannot trigger outbound SMS or CRM writes.