Webhooks notify your server when a payment, checkout session, refund, subscription, invoice, or customer action changes state.

​
Event envelope

Every event has a stable event ID, event type, creation time, and resource data. Store the event ID before applying business effects so duplicate delivery is harmless.

​
Delivery rules

  1. Read the raw request body.
  2. Verify the signature with the endpoint secret.
  3. Reject invalid or stale signatures.
  4. Deduplicate by event ID.
  5. Queue work and return a success response quickly.
  6. Retry transient processing failures without changing the financial state twice.
See Webhook operations for signature, retry, and observability guidance.