Receipt Authority APIStart building
Browse documentation

Signed webhooks

At-least-once test-mode event delivery with stable delivery identities and locally verifiable HMAC signatures.

Endpoints require HTTPS, public DNS destinations, no redirects, and an explicit verification step.