meCash Webhooks
Webhooks are a way for meCash to send your application automatic notifications whenever specific events take place. Instead of your application constantly asking meCash for updates, meCash pushes the information to you in real-time.
Webhook Security
All meCash webhook events are signed using an HMAC-512 signature in the X-Signature header.
The signature is computed from the raw request body using your webhook's secret key (found in Developers → Webhooks in your dashboard).
Your server should verify this signature before processing the event to ensure authenticity and prevent replay attacks.
How Webhooks Work
The process is straightforward:
- An Event Occurs: Something happens in your account, like a successful payout or a collection.
- meCash Sends a Request: We send a secure HTTP POST request containing the event details to the webhook URL you've configured.
- You Acknowledge and Verify: Your server acknowledges receipt by returning a
2XXstatus code and then validates the request's signature to confirm it's genuinely from meCash.
How to Configure a Webhook in meCash
Navigate to the Webhooks Page
-
In the Developers section of your meCash dashboard, select Webhooks from the left-hand menu.
Click on "Create Webhook"
-
To add a new webhook, click on the Create Webhook button at the top right of the page.
Enter the Webhook URL
-
Provide the URL where you want to receive webhook events.
-
Ensure that your endpoint is publicly accessible and can handle incoming POST requests.
-
Your endpoint should return an HTTP 2XX status code to acknowledge receipt.
Confirm and Activate
- Click Confirm to register the webhook.
- Once added, the webhook will appear in the list along with its status.