get https://api.circle.com/v2/notifications/publicKey/
Get the public key and algorithm used to digitally sign webhook notifications. Verifying the digital signature ensures the notification came from Circle.
In the headers of each webhook, you can find
X-Circle-Signature
: a header containing the digital signature generated by Circle.X-Circle-Key-Id
: a header containing the UUID. This is will be used as theID
as URL parameter to retrieve the relevant public key.