Once created click into the webhook and press reveal under signing secret to reveal the webhook API key. Add this key to your .env file Next open App/Http/Middleware/VerifyCsrfToken.php to whitelist an endpoint to allow Stripe to send POST requests in.