Skip to main content

Webhooks API

Base URL: https://api.peakgateway.co

List webhook endpoints​

GET /v1/webhooks

Returns configured webhook endpoints and their delivery settings.

Event types​

Common payment lifecycle events include:

  • transaction.created
  • transaction.authorized
  • transaction.captured
  • transaction.refunded
  • subscription.created
  • settlement.generated

Signature verification​

Verify incoming webhook signatures before processing payloads:

  1. Read the raw request body
  2. Compute an HMAC using your webhook signing secret
  3. Compare against the signature header in constant time
  4. Reject requests with invalid signatures

Also enforce timestamp drift limits and replay protection.