API reference and playgroundWebhooks
List your webhooks
curl -X GET "https://test-api.kashier.io/v2/webhooks"[ { "_id": "66a1f2c3e4b0a1234567890a", "merchantId": "MID-10293", "name": "Orders production endpoint", "url": "https://shop.example.com/kashier/webhook", "headers": { "X-Shop-Token": "whsec_live_abc123", "X-Env": "production" }, "events": [ "pay", "refund", "void", "TRANSFERRED" ], "mode": "live", "isActive": true, "createdAt": "2026-06-22T12:00:00.000Z", "updatedAt": "2026-06-22T12:00:00.000Z" }]Returns every webhook configured for your merchant, across both modes.
Authorization
secretKey Authorization<token>
Merchant secret key used to identify the merchant, obtained from Kashier's dashboard. Pass the raw secret key value in the Authorization header (NOT a "Bearer" token).
In: header
Response Body
application/json
application/json
application/json
application/json
application/json
Update an allow-list entry PUT
Changes the address or label on an existing entry. Send the whole entry, not just the field you are changing. Requires the edit-IP permission on your user's role.
Create a webhook POST
Creates a new webhook for your merchant. The webhook's url must be https. There is a cap on how many webhooks you can hold in each mode; once you reach it, creating another webhook in that mode is…