Webhooks

Subscribe to order and dropship events with signed payloads and retry logs in the developer portal.

Event catalog

order.created, order.paid, dropship.po.created, dropship.po.shipped, dropship.po.cancelled, dropship.network.connected, dropship.network.order.placed. Signature header: X-Mrfqy-Signature.

Verify signatures

Every delivery includes X-Mrfqy-Signature — an HMAC-SHA256 of the raw body using your app secret.

import { verifyWebhookSignature } from "@mrfqy/sdk/node";

const valid = verifyWebhookSignature({
  payload: rawBody,
  signature: req.headers["x-mrfqy-signature"] ?? "",
  secret: process.env.MRFQY_WEBHOOK_SECRET!,
});

Retries

Failed endpoints are retried with backoff. Inspect delivery logs in the portal before going live on high-volume stores.