Webhook

Transaction status changed

​

One header, Webhook-Signature: t=<unix time>,v1=<hex>. v1 is the hex HMAC-SHA256 of <t>.<raw body> with the shop's signing secret; during a secret rotation the header carries two v1 values. Reject a t more than 5 minutes from your clock. Pick the secret by shop_id in the body; trust nothing in the body until the signature matches. Answer 2xx within 30 s, otherwise up to 15 redeliveries over about 2 days — 16 attempts in total; the pause before redelivery N is N⁴ + 3 s. Deduplicate on id.

Headers

  • Webhook-Signature
    Type: string
    required

    t — Unix time of this delivery attempt, in seconds. v1 — the signature; two v1 during a secret rotation.

Body·

required
application/json
  • created_at
    Type: stringFormat: date-time
    required

    the date-time notation as defined by RFC 3339, section 5.6, for example, 2017-07-21T17:32:28Z

  • data
    Type: object
    required
    Properties: 1
  • id
    Type: stringFormat: uuid
    required

    Event id. The same on every redelivery — deduplicate on it.

  • shop_id
    Type: integer
    required

    The id of the shop the event belongs to. Pick the shop's signing secret by it.

  • type
    Type: enum
    required
    values
    payin.requires_actionpayin.authorizedpayin.completedpayin.failedpayin.refundedpayin.capture_failedpayin.void_failedrefund.completedrefund.failedpayout.completedpayout.failed

Responses

  • 200

    Acknowledged. Any 2xx stops redelivery.

  • 500

    Any non-2xx or a timeout schedules a redelivery.

Request Example for postevent
{
  "id": "8d4b2a0c-5e9f-4a6d-9c1b-3f0e6a9d2cf8",
  "type": "payin.completed",
  "shop_id": 1024,
  "created_at": "2026-09-29T09:00:20Z",
  "data": {
    "object": {
      "id": "0b6f4e2a-7c1d-4e8b-9a3f-5d2c8e1b4a70",
      "object": "payin",
      "merchant_reference": "order-10001",
      "method_type": "payin_card",
      "status": "completed",
      "status_details": null,
      "amount": {
        "value": "100.50",
        "currency": "EUR"
      },
      "refunded_amount": {
        "value": "0.00",
        "currency": "EUR"
      },
      "next_action": null,
      "capture_method": "automatic",
      "card": {
        "brand": "visa",
        "last4": "1111"
      },
      "created_at": "2026-09-29T09:00:00Z",
      "updated_at": "2026-09-29T09:00:20Z"
    }
  }
}
No Body

Acknowledged. Any 2xx stops redelivery.

Previous
Webhooks
Next
Money