Receive email with one API

import { verifyWebhook } from "mailkite";   // npm install mailkite

app.post("/mailkite", express.raw({ type: "*/*" }), async (req, res) => {
  const ok = await verifyWebhook(
    req.header("x-mailkite-signature"),
    req.body,                                 // raw bytes — required to verify
    process.env.MAILKITE_WEBHOOK_SECRET,
  );
  if (!ok) return res.status(401).end();

  const email = JSON.parse(req.body);
  console.log(email.from.address, "->", email.subject);   // ada@example.com -> Re: invoice #1042
  res.json({ status: "ok" });                 // 2xx acks; MailKite retries anything else
});

# pip install mailkite-dev
import hmac, hashlib, os, time
from flask import Flask, request

app = Flask(__name__)
SECRET = os.environ["MAILKITE_WEBHOOK_SECRET"].encode()

@app.post("/mailkite")
def mailkite():
    sig = request.headers["x-mailkite-signature"]          # t=<ms>,v1=<hex>
    parts = dict(p.split("=", 1) for p in sig.split(","))
    if abs(time.time() * 1000 - int(parts["t"])) > 300_000:  # replay window (t is ms)
        return "stale", 401
    signed = parts["t"].encode() + b"." + request.get_data()
    mac = hmac.new(SECRET, signed, hashlib.sha256).hexdigest()
    if not hmac.compare_digest(mac, parts["v1"]):          # constant-time
        return "bad signature", 401

    email = request.get_json()
    print(email["from"]["address"], email["subject"])
    return {"status": "ok"}

<?php // composer require mailkite/mailkite  (Laravel route)
use Illuminate\Support\Facades\Route;
use Illuminate\Http\Request;

Route::post('/mailkite', function (Request $request) {
    $sig = $request->header('x-mailkite-signature');        // t=<ts>,v1=<hex>
    parse_str(str_replace(',', '&', $sig), $parts);
    if (abs(time() - (int) $parts['t']) > 300) return response('stale', 401);

    $body = $request->getContent();                         // raw body
    $mac  = hash_hmac('sha256', $parts['t'] . '.' . $body, env('MAILKITE_WEBHOOK_SECRET'));
    if (!hash_equals($mac, $parts['v1'])) return response('bad signature', 401);

    $email = json_decode($body, true);
    logger($email['from']['address'] . ' -> ' . $email['subject']);
    return response()->json(['status' => 'ok']);
});