Guide
Webhooks
Receive and verify payment.success events with HMAC signatures.
Delivery model
On successful payment confirmation, Trezalink posts a payment.success payload to merchant webhook URL.
Signature verification
Validate X-Trezalink-Signature using HMAC-SHA256 over raw payload and your webhook secret.
Observability
Webhook logs include status code, response snippet, and retry actions from maintenance recovery console.
Align webhook retry policy with API diagnostics: retry only when upstream responses are transient, and retain correlated request identifiers in merchant-side logs for support escalation.