Verify webhook signatures
2 min read
Short answer
Every webhook is signed with your endpoint's signing secret. Check the signature before you trust an event. The official SDKs for Node.js, PHP, Laravel and WooCommerce do it in one call.
Read the webhooks guideWhat to do
- 1
Add an endpoint
Under Developers, add your URL and copy its signing secret.
- 2
Verify each event
Use the SDK's webhook helper with the raw request body.
Handle the events
escrow.funded, escrow.completed and escrow.refunded keep your system in step.
Did this answer your question?