Webhooks Setup

Configure webhooks to receive real-time notifications when verification events occur.

Why Use Webhooks?

Webhooks are the recommended way to receive verification results. They provide:

Real-time Updates

Receive notifications instantly when verifications complete.

Reliable Delivery

Automatic retries ensure you never miss an event.

Secure Verification

Server-side validation prevents tampering.

Important
Never trust client-side verification results. Always verify the result on your server using webhooks or the API. Client-side events can be manipulated by malicious users.

Creating a Webhook Endpoint

First, create an endpoint on your server to receive webhook events:

server.jsjavascript
Loading...

Registering Your Webhook

Via Dashboard

  1. Navigate to Settings

    Go to your Dashboard Settings page.

  2. Open Webhooks Section

    Click on the "Webhooks" tab in the settings menu.

  3. Add Endpoint

    Click "Add Endpoint" and enter your webhook URL.

  4. Select Events

    Choose which events you want to receive.

  5. Copy Signing Secret

    Save the signing secret securely—you'll need it to verify signatures.

Via API

Terminalbash
Loading...

Response:

Responsejson
Loading...
Tip
Store the secret in a secure environment variable. It's only shown once when creating the webhook.

Local Development

For local development, use a tunneling service to expose your local server:

Terminalbash
Loading...

Then register this URL in your dashboard or via the API. Remember to update it when your tunnel URL changes.

Testing Webhooks

Test your webhook endpoint from the dashboard or via API:

Terminalbash
Loading...

You can also view webhook delivery logs in your dashboard under Settings → Webhooks → select your endpoint → View Logs.

Best Practices

  1. Return 2xx quickly

    Process webhooks asynchronously and return a 2xx response within 5 seconds to avoid timeouts.

  2. Handle duplicates

    Use the event id to detect and handle duplicate deliveries.

  3. Verify signatures

    Always verify webhook signatures to ensure events are authentic.

  4. Use HTTPS

    Only use HTTPS endpoints in production for secure delivery.