Skip to content
ShipSecurelySecurity reference
Menu
Your tool here — sponsor ShipSecurely

Tools

Stripe CLI

Forwarding Stripe webhook events to a local server so you can test signature verification.

Share link · Share on X

Last updated

Free tierPayments
Free tier
Yes
Checked
2026-10-13

What the public pages say

The CLI is how you test the bug in unverified Stripe webhooks without deploying. stripe listen gives you a signing secret that matches the events it forwards. The secret in the Dashboard is for the deployed endpoint. They are different.

The CLI does not make the handler safe. You still have to verify the signature and ignore the body when verification fails.

Free tier

Stripe's webhook documentation tells you to install the Stripe CLI and run `stripe listen --forward-to` when you do not yet have a public HTTPS URL. The command prints a webhook signing secret for those forwarded events. The page does not list a separate price for the CLI.

Not stated on the vendor's site

Sources

Markdown version · Canonical page: https://shipsecurely.dev/tools/stripe-cli