Guides
Receive webhooks
Register an endpoint, verify what arrives, and survive retries.
1. Register the endpoint#
Add your HTTPS URL in Settings → Webhooks and choose the events you want. A signing secret is generated for that endpoint; it is yours alone and no other endpoint shares it.
2. Verify every delivery#
Check the x-signature header before you trust the body. The full scheme is on the webhooks reference page.
3. Answer fast, and deduplicate#
- Return 2xx quickly and do your work afterwards — a slow endpoint earns retries.
- Deduplicate on the event id: the same event can arrive more than once.
- A failing endpoint is retried with backoff and then disabled automatically. Every attempt is in the delivery log.