TrieOH
PayssageAPIWebhooks

List a wallet's webhook endpoints

Lists the webhook endpoints registered on the wallet. The actor must own the wallet.

GET/wallets/{wallet_id}/webhooks/endpoints

Lists the webhook endpoints registered on the wallet. The actor must own the wallet.

Authorization

bearerAuth
AuthorizationBearer <token>

JWT issued by IdentityX, signed with Ed25519

In: header

Path Parameters

wallet_id*string

Wallet ID.

Response Body

application/json

application/problem+json

application/problem+json

application/problem+json

application/problem+json

curl -X GET "https://example.com/wallets/497f6eca-6276-4993-bfeb-53cbbbba6f08/webhooks/endpoints"
{
  "items": [
    {
      "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
      "wallet_id": "d9a8fbfc-848f-43a2-9168-911ed3a04a48",
      "name": "string",
      "url": "http://example.com",
      "secret": "string",
      "created_at": "2019-08-24T14:15:22Z"
    }
  ]
}
{
  "detail": "string",
  "instance": "../dictionary",
  "errors": [
    {
      "field": "string",
      "message": "string"
    }
  ],
  "type": "http://example.com",
  "status": 401,
  "title": "Unauthenticated"
}
{
  "detail": "string",
  "instance": "../dictionary",
  "errors": [
    {
      "field": "string",
      "message": "string"
    }
  ],
  "type": "http://example.com",
  "status": 403,
  "title": "Insufficient Role"
}
{
  "detail": "string",
  "instance": "../dictionary",
  "errors": [
    {
      "field": "string",
      "message": "string"
    }
  ],
  "type": "http://example.com",
  "status": 404,
  "title": "Not Found"
}
{
  "detail": "string",
  "instance": "../dictionary",
  "errors": [
    {
      "field": "string",
      "message": "string"
    }
  ],
  "type": "http://example.com",
  "status": 500,
  "title": "Internal Server Error"
}

Receive a provider webhook POST

Ingestion endpoint called by the payment provider (e.g. MercadoPago) when a payment event occurs. Payssage verifies the provider signature, normalizes the event, stores it, and dispatches deliveries to every webhook endpoint on the event's wallet. Returns 200 even for expected-and-ignored cases (unknown event types, duplicate deliveries) so the provider does not retry; bad signatures return an error. Public — providers cannot send an Authorization header.

Create a webhook endpoint POST

Registers a tenant webhook endpoint on the wallet. Payssage will POST provider events to `url` (see the top-level "Webhooks for tenants" section for the delivery envelope and signature headers). The returned `secret` is used to verify the `X-Payssage-Signature` header on each delivery. The actor must own the wallet.