Outbound webhooks (merchant-side)

Webhooks let your own servers react in real time to events in Techfleet Sync. Point them at any HTTPS endpoint you control.

Configure a webhook

1. Go to Settings → API → Webhooks
2. Click Add Webhook
3. Enter your HTTPS endpoint URL
4. Pick the events you want delivered
5. Copy the signing secret — you will use it to verify incoming requests

Delivery and retries

• Each event is delivered as a POST with a JSON body
• The X-Techfleet-Signature header is an HMAC-SHA256 of the body using your signing secret
• Non-2xx responses trigger retry with exponential backoff, up to 5 attempts
• Failed deliveries appear in the Webhook Log with the response status and body

Verify a signature

const expected = crypto
  .createHmac("sha256", SIGNING_SECRET)
  .update(rawBody)
  .digest("hex");
if (expected !== req.headers["x-techfleet-signature"]) throw new Error("bad sig");