A universal JavaScript HMAC-SHA256 hashing algorithm (browsers + Node.js).

Lightweight, production-ready toolkit for signing and verifying webhook requests using HMAC-SHA256

Verify Krova Cloud outbound webhook signatures — HMAC-SHA256, constant-time comparison, replay protection. Express, Next.js & Fastify helpers. Zero runtime dependencies.

Security primitives for the Graphorin framework: SecretValue runtime-safe wrapper, SecretRef URI parser, pluggable SecretsStore implementations, per-tool ACL, AsyncLocalStorage-based audit scope tracking, server token authentication (HMAC-SHA256 + pepper

Standard Webhooks HMAC-SHA256 signing and verification for EEP-compliant platforms.

Webhook signature verification SDK for Undisk MCP — verify HMAC-SHA256 signed webhook payloads

APEX API security utiity. Includes helper operations to generate HMAC-SHA256 and RSA-SHA256 signatures

OpenDPP webhook event types + a zero-dependency, constant-time HMAC-SHA256 signature verifier for inbound OpenDPP webhooks (ESM, Node >=26).

walcast sink: durable HTTP POST delivery with HMAC-SHA256 signatures. Node stdlib only.

Web/HTTP ChannelDriver adapter for @claustrum/core. Pluggable render sink (WebSocket/SSE) and HMAC-SHA256 envelope attestation.

Hash an input value using HMAC-SHA256 and a secret key from an environment variable.

TypeScript API Client for Sigrex with automatic HMAC-SHA256 request signing and support for ML-DSA44

Node.js Redsys api implementation with new the key-hashed message authentication code (HMAC) SHA256 for the virtual payment gateway integration. This is a node.js port of the PHP API provided by [Redsys](http://www.redsys.es/)

HMAC-SHA256 request signing and verification for API integrations

Fallback HMAC SHA256 for browser

Server-side HMAC-SHA256 token signer for the ForU Gatekeeper AI API

Isomorphic TypeScript client for the Animal-ID Partner API (HMAC-SHA256 signing, zero runtime dependencies).

A pure JS implementation SHA256.

Validates Contentful webhook signatures using HMAC-SHA256, parses webhook payloads, and provides type-safe interfaces for all webhook event types

SHA256 wrapper for browsers that prefers `window.crypto.subtle` but will fall back to a pure JS implementation in @aws-crypto/sha256-js to provide a consistent interface for SHA256.