Webhooks
Receive and verify RevKeen webhook events
Webhooks push event notifications to your application when something changes in RevKeen — a payment succeeded, an invoice was paid, a subscription renewed. They are the correct way to keep your system in sync without polling.
Test webhook delivery in Staging. The mock server does not emit events.
Start here
Set up an endpoint
Test locally
Receive and verify
Troubleshooting
Operational model
- Create an endpoint in the dashboard or via the Webhook Endpoints API. Select the event types you care about.
- RevKeen signs and POSTs each event as it occurs.
- Your server verifies the signature, commits a unique inbox entry, and only then returns
2xx. - Downstream work happens asynchronously after acknowledgement.
The event envelope
Full event deliveries use an envelope like the illustrative excerpt below. Oversized payloads can use a signed reference instead (see Large payloads).
{
"id": "evt_1a2b3c4d5e6f",
"type": "payment.succeeded",
"created": 1705689600,
"livemode": true,
"data": {
"object": {
"id": "resource_example"
}
}
}| Field | Type | Description |
|---|---|---|
id | string | Unique event identifier. Use this for deduplication. |
type | string | Event type using dot notation (e.g., payment.succeeded). |
created | integer | Unix timestamp when the event was created. |
livemode | boolean | true for production, false for staging. |
data.object | object | The resource that triggered the event. |
data.previous_attributes | object | Optional. May be present on update events (customer.updated, meter.updated, meter_price.updated) with the previous values of changed fields. Do not depend on it. |
Large payloads
Oversized payloads can arrive as a signed reference with _truncated: true, objectId,
objectType, fetchUrl, and updatedAt. Do not assume data.object exists.
Verify the signature, persist the reference, then resolve the event through your
configured API origin with the matching merchant credential. Do not blindly fetch
an arbitrary URL from a request. See receiving events.
What's next
Verify signatures
HMAC verification, timestamp tolerance, replay-attack prevention.
Retry behavior
Delivery retry schedule, dead-letter behaviour, idempotency.
Event catalogue
Every event type RevKeen emits, with payload schemas.
Webhook Endpoints API
Create, update, and test endpoints via the REST API.
API reference for this workflow
Owner: david · Reviewed 30 Sep 2026 · Next review 30 Oct 2026