Webhooks

Webhooks notify your system of changes without polling. Every delivery is signed; deliveries are retried on failure; every delivery can be replayed from the dashboard.

Subscribing

Create a subscription via the API or dashboard. Each subscription carries:

• A target URL.
• An event filter (e.g. orders.order.created, listings.listing.*).
• A signing secret (auto-generated; rotate from the dashboard).

Verifying signatures

Every request includes:

• X-SolidCommerce-Signature: t=<unix>,v1=<hmac_sha256>
• X-SolidCommerce-Event: <event_type>
• X-SolidCommerce-Delivery: <uuid>

Recompute the signature server-side using your secret; reject any request older than 5 minutes.

Retries

Failed deliveries (non-2xx, timeout) are retried with exponential backoff for up to 24 hours: 1m, 5m, 30m, 2h, 6h, 12h, then dead-letter.

Replay

Any delivery can be replayed from the dashboard or the API:

POST /v1/platform/webhooks/deliveries/{delivery_id}/replay

Replay does not affect the original delivery's status.