> ## Documentation Index
> Fetch the complete documentation index at: https://docs.skinloop.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Skinloop payment event delivered to a merchant endpoint

> Delivery is at-least-once and the `id` is stable; receivers must
deduplicate by event ID. `Skinloop-Signature` is
`v1=<lowercase hex HMAC-SHA256>` over
`<eventId>.<timestamp>.<exact UTF-8 request bytes>`. The timestamp is
Unix seconds. Redirects are not followed.




## OpenAPI

````yaml /openapi.yaml webhook paymentEvent
openapi: 3.1.0
info:
  title: Skinloop API
  version: 1.1.0-draft
  description: |
    Public contract for Skinloop merchant payments, hosted checkout status,
    merchant dashboard reads, and merchant webhooks. Skinloop never exposes
    credentials, private identifiers, trade URLs, or client tokens.
servers:
  - url: https://api.skinloop.io
    description: Production
security: []
tags:
  - name: Payments
  - name: Checkout
  - name: Reporting
  - name: Dashboard
paths: {}

````