Use the webhook secret on webhook creation and check it and webhook receive
Since we're going to migrate all actions (also queries that now are implemented in the api handlers) there