Skip to main content
Webhooks let your external systems receive real-time notifications when events happen in OwnPay. Every webhook payload is signed with HMAC-SHA256 so you can verify authenticity. Webhook management lives in the Developer Hub.

​
Create a webhook endpoint

1
Open Developer Hub from the left sidebar, then click the Webhooks tab.
2
Click Add Endpoint. Enter your HTTPS URL - for example, https://your-app.com/api/ownpay/webhook.
3
Select the events you want to receive from the checkbox list. You can choose all events or pick specific ones.
4
Click Save. OwnPay generates a unique signing secret. Copy this secret immediately - it will not be shown again.
Webhook endpoint URLs must use HTTPS. OwnPay refuses to deliver payloads to plain HTTP addresses.

​
Available events

​
Signature verification

Each webhook request includes an X-OwnPay-Signature header containing the HMAC-SHA256 hash of the raw payload body using your signing secret.
For the full verification algorithm, code examples, and library recommendations, see the webhook API reference.

​
Delivery and retries

OwnPay tracks every delivery attempt. When an endpoint returns a non-2xx status code or times out after 10 seconds, the system retries on an escalating schedule: If all retries are exhausted, the event enters the dead letter queue. You can inspect and manually replay dead-lettered events from the Developer Hub.
Successful deliveries (2xx response) are logged with the response status code and response body for auditing.

​
Test a webhook

Click the Test Webhook button next to any endpoint to send a sample payment.completed payload. This is useful during development to verify your signature verification logic and endpoint routing before going live.
Last modified on August 25, 2026

Related topics

WebhooksDispatch Test WebhookWebhook Integration TutorialWebhook Delivery LogDeveloper Hub