Webhooks

Access Webhooks

Click Webhooks in the sidebar (under Configuration).

Create a webhook endpoint

1. Click New Endpoint
2. Enter your endpoint URL — the HTTPS URL that will receive webhook payloads
3. Select the events you want to receive
4. Click Save

Supported events

Webhook payload

Each webhook delivery sends a JSON payload with:

• event — the event type (e.g., consumer.registered)
• timestamp — when the event occurred
• data — event-specific data (consumer details, product info, etc.)

Security — HMAC-SHA256 signing

Every webhook delivery includes a signature header for verification. Veribl signs payloads using HMAC-SHA256:

1. When you create an endpoint, Veribl generates a signing secret
2. Each delivery includes an X-Veribl-Signature header
3. Verify the signature on your server by computing the HMAC-SHA256 of the payload using your secret
4. Reject deliveries with invalid signatures

Tip: Always verify webhook signatures in production to prevent spoofed requests.

Test a webhook

1. Open your webhook endpoint
2. Click Send Test
3. Veribl sends a test payload to your endpoint
4. Check the delivery log to see the response

Delivery logs

View the delivery history for each endpoint:

1. Click on a webhook endpoint
2. Click Deliveries to see all delivery attempts
3. Each entry shows: event type, timestamp, response status, and payload

Retry behavior

If your endpoint returns an error (non-2xx status code), Veribl retries the delivery up to 3 times with increasing delays.