Register a webhook endpoint
Registers an HTTPS URL to receive PayBridgeNP event notifications.
PayBridgeNP signs every delivery with an HMAC-SHA256 signature using the signing_secret returned here. Save this secret immediately - it is only shown once.
Each delivery carries two headers: X-PayBridgeNP-Signature: t=<unix_seconds>,v1=<hmac_hex> and X-PayBridgeNP-Timestamp. To verify, parse the t and v1 values out of the signature header, compute HMAC-SHA256(signing_secret, "<t>.<raw_request_body>"), and compare the hex digest to v1 in constant time. Reject deliveries whose timestamp is more than ~300 seconds old to guard against replay. The SDKs’ constructEvent() helpers do all of this for you; see the webhook verification guide.
Authorizations
Your PayBridgeNP API key. Obtain one from the dashboard under Settings → API Keys. Prefix: sk_test_ for testing, sk_live_ for production.
Body
Response
Webhook endpoint registered.
"we_01j9x2k3m4n5p6q7r8s9t0u1v2"
true when created with a live key, false for sandbox.
"https://yourapp.com/webhooks/paybridgenp"
Event types this endpoint receives. Empty array = all events.
HMAC-SHA256 signing secret. Only returned once - save it now.
"whsec_live_abc123..."