API Reference
Skinloop payment event delivered to a merchant endpoint
Delivery is at-least-once and the id is stable; receivers must
deduplicate by event ID. Skinloop-Signature is
v1=<lowercase hex HMAC-SHA256> over
<eventId>.<timestamp>.<exact UTF-8 request bytes>. The timestamp is
Unix seconds. Redirects are not followed.
Headers
Pattern:
^evt_[A-Za-z0-9]+$HMAC-SHA256 using the endpoint signing secret over ...
Pattern:
^v1=[a-fA-F0-9]{64}$Body
application/json
Allowed value:
"1"Pattern:
^evt_[A-Za-z0-9]+$Available options:
payment.initiated, payment.pending, payment.active, payment.hold, payment.completed, payment.canceled, payment.declined, payment.failed, payment.reverted Response
2XX
Merchant accepted the event
