Endpoints de webhook

Adónde enviamos los eventos de este local.

POST/v1/webhook_endpoints

Permiso: webhooks:write

Añade un endpoint. url debe ser HTTPS pública. events es una lista de tipos de evento; si no la envías, recibes todos. El secret de las firmas solo aparece en esta respuesta.

curl

curl https://loyaltyfy.io/api/v1/webhook_endpoints \
  -H "Authorization: Bearer sk_test_..." \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://pos.example.com/loyaltyfy/webhooks",
    "events": ["transaction.completed", "order.created"]
  }'

Respuesta · 201

{
  "object": "webhook_endpoint",
  "id": "01c2a784-4bcf-43b9-8ac9-ddbad7a25341",
  "url": "https://pos.example.com/loyaltyfy/webhooks",
  "description": null,
  "events": ["transaction.completed", "order.created"],
  "status": "enabled",
  "disabled_reason": null,
  "livemode": false,
  "created_at": "2026-10-06T18:17:32.381+00:00",
  "secret": "whsec_UvjHvXfPk80ITYl_xPeAtskI0WjR8-PS"
}

GET/v1/webhook_endpoints

Permiso: webhooks:write

Todos los endpoints del local.

GET/v1/webhook_endpoints/{id}

Permiso: webhooks:write

Un endpoint, con su estado y el motivo si se desactivó.

PATCH/v1/webhook_endpoints/{id}

Permiso: webhooks:write

Cambia url, events, description o enabled. Usa enabled: true para reactivar un endpoint que se desactivó por fallos.

DELETE/v1/webhook_endpoints/{id}

Permiso: webhooks:write

Elimina el endpoint. Las entregas en curso se detienen.

POST/v1/webhook_endpoints/{id}/test

Permiso: webhooks:write

Envía ahora un evento test.ping firmado y te dice qué respondió tu endpoint.

curl

curl -X POST https://loyaltyfy.io/api/v1/webhook_endpoints/01c2a784-4bcf-43b9-8ac9-ddbad7a25341/test \
  -H "Authorization: Bearer sk_test_..."

# { "object": "webhook_test", "delivered": true, "status_code": 200, "error": null }