PixeltablePixeltable Logo
Example apps

Webhook Vault

Webhook registry API that HMAC-signs payloads with a secret from the environment, as computed columns

Open in CodespacesView on GitHub

One app.py with 1 table, 3 computed columns, 4 HTTP routes. Needs pixeltable[serve]>=0.7.14. Updated 2026-09-26.

app.py
"""Webhook Vault API built with Pixeltable.


    export WEBHOOK_HMAC_SECRET=<any-long-random-string>
    pxt schema update app.py vault
    pxt service run app.py vault
"""
import pixeltable as pxt
import pixeltable.functions as pxtf
from pixeltable.serving import FastAPIRouter


from udfs import digest_payload, sign_payload, target_host


# ---- tables ----
TableModel = pxt.model_base()




class Webhooks(TableModel, name='webhooks'):
    id = pxt.Column(value=pxtf.uuid.uuid7(), primary_key=True)
    name: pxt.String
    url: pxt.String
    event: pxt.String
    payload: pxt.String


    host = target_host(url)
    digest = digest_payload(payload)
    signature = sign_payload(event, payload)




# ---- queries ----
@pxt.query
def deliveries_for(event: str):
    """Signed deliveries for one event type."""
    return Webhooks.where(Webhooks.event == event).select(
        Webhooks.id, Webhooks.name, Webhooks.host, Webhooks.signature
    ).order_by(Webhooks.name)




# ---- routes ----
vault_api = FastAPIRouter(name='vault_api')
vault_api.add_insert_route(
    Webhooks, path='/webhooks',
    inputs=[Webhooks.name, Webhooks.url, Webhooks.event, Webhooks.payload],
    outputs=[Webhooks.id, Webhooks.host, Webhooks.digest, Webhooks.signature],
)
vault_api.add_compute_route(Webhooks, path='/sign', inputs=[Webhooks.event, Webhooks.payload],
                            outputs=[Webhooks.digest, Webhooks.signature])
vault_api.add_delete_route(Webhooks, path='/webhooks/delete')
vault_api.add_query_route(path='/webhooks/by-event', query=deliveries_for, method='get')

What app.py declares

Each row links to its line.

  • runs on insert
  • stored
  • index
  • route
webhooksL17
  1. idnameurleventpayload
  2. host = target_host(url)L24
  3. digest = digest_payload(payload)L25
  4. signature = sign_payload(event, payload)L26

serves vault_api

  1. POST/webhookstakes name, url, event, payload; returns id, host, digest, signatureL40
  2. POST/signtakes event, payload; returns digest, signatureL45
  3. POST/webhooks/deleteL47
  4. GET/webhooks/by-eventtakes eventL48

Run it

Needs uv. The routes then answer on port 8000.

terminal
git clone https://github.com/pierrebrunelle/pixeltable-webhook-vault
cd pixeltable-webhook-vault
uv sync
uv run pxt schema update app.py vault
uv run python seed.py vault
uv run pxt service run app.py vault --port 8000

Related apps

All 29 example apps