Webhooks

Register and manage webhook endpoints that receive real-time invoice event notifications.

Coinsnap signs every delivery twice with the webhook secret, so you can verify authenticity on your server.

X-Coinsnap-Signature: t=<unixSeconds>,v1=<hex> signs ${t}.${body}. Prefer it: the timestamp is part of the signed input, so a captured request cannot be replayed with a fresh t. Verify v1, reject a t older than about 5 minutes, and compare in constant time.

X-Coinsnap-Sig: sha256=<hex> signs the body alone and offers no replay protection by itself. It is kept for existing receivers.

See the Webhook Payloads section below for the exact body structure of each event type.

📄️Create a new webhook

Registers a webhook URL that Coinsnap will call whenever a selected invoice event occurs.

📄️Get all webhooks for a specific store

Returns all webhooks registered for the given store, including their URL, subscribed events, and enabled state.

📄️Get information about specific webhook

Returns the configuration of a single webhook by its `webhookId`.

📄️Update a webhook

Updates the URL, subscribed events, enabled state, or secret of an existing webhook.

📄️Delete a webhook

Permanently deletes the specified webhook. Coinsnap will immediately stop sending deliveries to its URL.

📄️Redeliver a webhook payload

Retriggers delivery of a previously sent webhook payload to your endpoint.