Clerk, Webhooks, and Svix — A Story You'll Never Forget
I’ve got a website. It’s connected to Clerk for authentication. One day, my website tells Clerk: "Hey Clerk, if you ever create a new user, send me a messenger and tell me about it." Clerk’s like: "Sure thing. Just give me the address to your office (your deployed site’s URL), and I’ll send the messenger there." But my website is still in development, running on localhost: “Hmm... Can you just send the guy to my house instead (localhost)?” Clerk responds: “Nah... I can’t reach houses. I only send messengers to real offices on the internet.” So my website’s like: “No worries. I’ll call a taxi (ngrok/localtunnel), and they’ll bring your messenger from your office to my house, and return them back.” Now, things are cool… until the paranoia hits. My website suddenly realizes: “Wait a minute... What if some random guy pretends to be from Clerk? What if he tells me something like ‘You owe $1 billion in fake user debt?’

I’ve got a website. It’s connected to Clerk for authentication.
One day, my website tells Clerk:
"Hey Clerk, if you ever create a new user, send me a messenger and tell me about it."
Clerk’s like:
"Sure thing. Just give me the address to your office (your deployed site’s URL), and I’ll send the messenger there."
But my website is still in development, running on localhost:
“Hmm... Can you just send the guy to my house instead (localhost)?”
Clerk responds:
“Nah... I can’t reach houses. I only send messengers to real offices on the internet.”
So my website’s like:
“No worries. I’ll call a taxi (ngrok/localtunnel), and they’ll bring your messenger from your office to my house, and return them back.”
Now, things are cool… until the paranoia hits.
My website suddenly realizes:
“Wait a minute... What if some random guy pretends to be from Clerk? What if he tells me something like ‘You owe $1 billion in fake user debt?’