Webhooks

Register an endpoint in the Mereb Hub and we'll POST a signed JSON payload for every event — charge.succeeded, payout.completed, dispute.opened, and more.

Verifying signatures

Every request includes a Mereb-Signature header. Verify it with your webhook signing secret before trusting the payload.

const isValid = Mereb.webhooks.verify(
  rawBody,
  req.headers['mereb-signature'],
  webhookSecret
);

Retries

Undelivered events retry with exponential backoff for up to 72 hours. Acknowledge with a 200 immediately and process asynchronously to avoid timeouts turning a hiccup into a retry storm.