Webhooks overview

Webhooks push events from mMoney to your server. When an invoice is paid, canceled, or refunded, mMoney sends an HTTP POST to your endpoint.

Set up an endpoint

1. Open the Manage API page in the merchant dashboard.
2. Open the Webhooks tab.
3. Add your HTTPS endpoint URL.
4. Pick the events you want to receive.

Verify the signature

Each delivery carries an MMoney-Signature header:

MMoney-Signature: t=<timestamp>,v1=<hmac>

The v1 value is an HMAC-SHA256 over "<t>.<raw_body>" with your webhook signing secret. Verify it before you trust the payload.

Endpoint rules

• Use a public host name. mMoney refuses a URL that points at a private, loopback, or link-local address.
• Give the final URL. mMoney does not follow redirects, so a 3xx answer counts as a failed delivery.
• mMoney records the status code of your answer, not the body.
• You can send 10 test events or resends a minute.

Retries

Delivery retries up to 5 times with backoff. Return a 2xx status fast; do slow work after you respond.