Webhooks let your application receive real-time notifications when events occur, without polling the API.

Registering an endpoint

1. In the developer portal, go to Webhooks → Add Endpoint.
2. Enter the public HTTPS URL of your listener.
3. Select the event types you want to subscribe to.
4. Save. A signing secret is generated — store it securely.

Verifying payloads

Each webhook request includes an X-Signature header. Verify it against an HMAC-SHA256 hash of the raw request body using your signing secret. Reject any request where the signatures do not match.