HMAC Signatures API — CUB SOFTWARE Developer

Base URL

Base https://cubsoftware.site

Authentication

No API key required — this endpoint is publicly accessible.

Please include a descriptive User-Agent header identifying your app.

HMAC Signatures

GETPOST /api/hmac Security

Sign or verify a payload, for webhooks.

Parameter	Type	Required	Description
text	string	required	The message to sign. May also be sent as a POST body.
key	string	required	The secret to sign it with. Never stored or logged.
algorithm	string	optional	sha256, sha1 or sha512. Default sha256.

Example Response

{
  "algorithm": "sha256",
  "note": "Compare signatures with a constant-time check, never ==.",
  "signature": "b82fcb791acec57859b989b430a826488ce2e479fdf92326bd0a2e8375a42ba4"
}

curl 'https://cubsoftware.site/api/hmac?text=payload&key=secret'
const res  = await fetch('https://cubsoftware.site/api/hmac?text=payload&key=secret');
const data = await res.json();
console.log(data.signature);
const https = require('https');

https.get('https://cubsoftware.site/api/hmac?text=payload&key=secret', (res) => {
    let body = '';
    res.on('data', chunk => body += chunk);
    res.on('end', () => {
        const data = JSON.parse(body);
        console.log(data.signature);
    });
});
import requests

res  = requests.get('https://cubsoftware.site/api/hmac?text=payload&key=secret')
data = res.json()
print(data['signature'])
<?php
$res  = file_get_contents('https://cubsoftware.site/api/hmac?text=payload&key=secret');
$data = json_decode($res, true);
echo $data['signature'];
package main

import (
    "encoding/json"
    "fmt"
    "io"
    "net/http"
)

func main() {
    resp, _ := http.Get("https://cubsoftware.site/api/hmac?text=payload&key=secret")
    defer resp.Body.Close()
    body, _ := io.ReadAll(resp.Body)
    var data map[string]any
    json.Unmarshal(body, &data)
    fmt.Println(data["signature"])
}
using System.Net.Http.Json;

var client = new HttpClient();
var data   = await client.GetFromJsonAsync<Dictionary<string, object>>(
    "https://cubsoftware.site/api/hmac?text=payload&key=secret"
);
Console.WriteLine(data["signature"]);
import java.net.URI;
import java.net.http.*;
import java.util.Map;
import com.fasterxml.jackson.databind.ObjectMapper;

var client = HttpClient.newHttpClient();
var req    = HttpRequest.newBuilder()
    .uri(URI.create("https://cubsoftware.site/api/hmac?text=payload&key=secret"))
    .build();
var res  = client.send(req, HttpResponse.BodyHandlers.ofString());
var data = new ObjectMapper().readValue(res.body(), Map.class);
System.out.println(data.get("signature"));
require 'net/http'
require 'json'

uri  = URI('https://cubsoftware.site/api/hmac?text=payload&key=secret')
data = JSON.parse(Net::HTTP.get(uri))
puts data['signature']

Try It

Live request

Edit the path and send it. This runs against the real endpoint.

Press Send to run the request.

Rate Limits

10 requests per second per IP, across every endpoint.

Going over returns 429 — back off and retry.

The Other 45 APIs

Memes Snowflake Decoder Timestamp Builder Permission Decoder Embed Validator Colour Converter Password Generator Hashes UUIDs Placeholder Text Intent Decoder Custom Emoji Message Links Invite Codes Bot Invite Builder Markdown Escape Mentions Webhook URLs OAuth2 URLs Discord Limits Base64 URL Encoding HTML Escaping JWT Decoder Case Converter Slugify Word Count Reverse Text ROT13 / Caesar JSON Formatter Number Bases Byte Sizes Durations Current Time Random Numbers Random Pick Dice Statistics Email Check URL Check IP Check Token Generator Exchange Rates Currency Converter QR Codes