Verify before processing
Treat every delivery as untrusted until its signature, timestamp tolerance, endpoint identity, tenant and country scope, and event schema are verified.
Developer preview API v1
Sandbox only. No real funds moved. No production access is granted here. Access requirements
Authenticated events
Verify, persist, acknowledge, then process
Deliveries are at-least-once notifications and never bypass tenant, country, signature, or state authority.
Acknowledge and deduplicate
Persist the event identity before side effects, return a bounded success promptly, and make processing idempotent because delivery can be duplicated or reordered.
Protect secrets and data
Store webhook secrets in the approved secret manager, rotate them through dual-key overlap, redact credentials and PII, and reject cross-tenant or wrong-country events.