Skip to main content
WEBHOOK

Authorizations

Authorization
string
header
required

API key sent in the Authorization header.

Headers

X-Signature
string
required

HMAC-SHA256 signature: sha256={hex}. Computed over the canonicalized (RFC 8785) request body using your webhook secret.

Body

application/json

Webhook envelope for order status changes. The payload is keyed by event name.

order_updated
object
required

Order representation for WebSocket messages

Example:

Response

200

Return any 2xx to acknowledge receipt. Process the event asynchronously — a slow handler triggers retries.