🔔 Merchant Webhooks

2.2 Webhook Payload Format

When an event occurs, XePay sends a webhook notification to your configured URL:

• Headers:

  • Content-Type: application/json

  • X-XePay-Signature: {signature}

  • X-XePay-Event: {event_type}

• Payload:

  {
    "event": "PAYOUT_CREATED",
    "timestamp": 1716376242,
    "data": {
      "id": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
      "merchant_id": "1fa85f64-5717-4562-b3fc-2c963f66afa6",
      "usdt_amount": 100.50,
      "status": "pending",
      "created_at": "2025-05-22T10:00:00Z"
    }
  }
  

• Signature Verification:

  payload_str = JSON.stringify(payload)
  expected_signature = HMAC-SHA256(payload_str, webhook_secret)
  
  # Verify that expected_signature matches X-XePay-Signature header
  

2.3 Webhook Event Types

Event Type	Description
PAYOUT_CREATED	A new payout request has been created
PAYOUT_STATUS_CHANGED	Payout status has changed
DEPOSIT_COMPLETED	A deposit transaction has completed