Posted in Web Botkit and Facebook | Botkit Documentation November 13, 2019 Facebook sends an X-HUB signature header with requests to your webhook. You can verify the requests are coming from Facebook by enabling validate_requests: true when creating your bot controller. https://botkit.ai/docs/v0/readme-facebook.html