Webhooks que no miente.

Firmado, protegido contra reproducción, reintentado hasta 2xx.

Suscríbase a eventos de factura/pedido/reembolso. Verifique HMAC-SHA256 en su punto final. Cada entrega está firmada HMAC-SHA256, tiene una marca de tiempo y se vuelve a intentar con un retraso exponencial hasta que su punto final devuelva 2xx.

Catalogar

Nueve eventos. Suscríbete a todos o a uno.

order.paid A buyer's checkout finalised. Settled on-chain.
order.refunded Refund pushed back to the buyer's wallet.
order.delivered Auto-delivery completed - key, file, or webhook handed over.
order.failed Checkout expired or rejected.
product.created Product published from API or dashboard.
product.updated Any field on a product changed.
payout.queued Payout request accepted, broadcast pending.
payout.confirmed Payout confirmed on-chain.
customer.created New buyer email registered in your shop.
Encabezados

Qué aterriza en su punto final

POST /your-endpoint
# Standard headers Sellix sets on every delivery
X-Event-Id:          evt_01J2PT83A5XKJZ5N6FM5YV9B2D
X-Event-Type:        order.paid
X-Webhook-Timestamp: 1779604200
X-Signature:         sha256=8f7a9a2b…
Content-Type:        application/json
User-Agent:          Sellix-Webhook/1.0

# Body - JSON, the resource that fired the event
{
  "id":   "evt_01J2PT83A5XKJZ5N6FM5YV9B2D",
  "type": "order.paid",
  "data": { "order_uuid": "…", "total_cents": 4900, … }
}
Interactivo

HMAC-SHA256 verificador

Pegue una carga útil + secreto. Calculamos la firma en vivo en su navegador usando Web Crypto API, el mismo algoritmo que usa nuestro SDK en su servidor.

Pegue una firma arriba para verificarla.
Implementación

Mismo cheque, en tu idioma.


            

Política de reintento

  • Up to 8 attempts per delivery
  • Back-off: 1m → 2m → 5m → 15m → 1h → 6h → 24h
  • Any 2xx ends the chain; 4xx / 5xx retries
  • Endpoint dies for 48h straight? We disable it and email the owner.

Reproducir y deduplicar

  • Reject any timestamp more than 5 minutes off - replay protection.
  • Dedupe by X-Event-Id on your side. Same id twice = same event.
  • A replayed event should also return 200 - it's a feature, not a duplicate.