API Reference
Skinloop payment event delivered to a merchant endpoint
Delivery is at-least-once and the id is stable; receivers must
deduplicate by event ID. Skinloop-Signature is
v1=<lowercase hex HMAC-SHA256> over
<eventId>.<timestamp>.<exact UTF-8 request bytes>. The timestamp is
Unix seconds. Redirects are not followed.
Headers
Pattern:
^evt_[A-Za-z0-9]+$HMAC-SHA256 using the endpoint signing secret over ...
Pattern:
^v1=[a-fA-F0-9]{64}$Body
application/json
Response
2XX
Merchant accepted the event
