Shopkit Webhooks

Webhooks allow you to build or set up integrations which subscribe to certain events on Shopkit stores.

The webhooks can be used to integrate with third-party services, for example invoicing systems, CRM services or even create notifications and alerts. You're only limited by your imagination.

If you find a bug or something worth fixing, create an issue or a pull request on the Github repo.


When one of the events is triggered, we'll send a HTTP POST payload to the webhook's configured URL.

We expect a 2xx status code when requesting your URL.

Failed requests will be retried 5 times in 1 hour intervals. After 5 retries, the webhook will be suspended.

Creating a webhook

  1. Login into your store.
  2. Navigate to the Webhooks section under the Account settings > Developers.
  3. Create a webhook by inserting the url and select an event.
Alternatively, you can create and delete webhooks through the Shopkit API.


When configuring a webhook, you can choose which events you would like to receive payloads for:

Name Description
order_canceled When an order status is changed to canceled
order_change_status When an order status is changed
order_created When an order is created
order_deleted When an order is deleted
order_delivered When an order status is changed to delivered
order_invoice When an order invoice is requested
order_paid When an order is set to paid
order_sent When an order status is changed to sent
order_shipping When an order shipping is requested
order_updated When an order is updated (any change is made to an order)


All webhooks deliver the payload in application/json as the body of the HTTP POST request.


The HTTP requests to your webhook's URL will contain a special header X-Shopkit-Event, with the name of the event that was triggered.

We also send the User-Agent for all requests as Shopkit-Webhook.


POST /payload HTTP/1.1

Host: localhost
User-Agent: Shopkit-Webhook
Content-Type: application/json
X-Shopkit-Event: order_updated
X-Webhook-Signature: 6d5a75b42956154a7da8843f56c272428fd43967be1a5474821940b377d061fe
Content-Length: 3484
    "order": {
        "id": 1337,
        "hash": "a77e38d0b16ba62f32361331774324904278edcf",
        "total": 157.03,
        "subtotal": 148.64,
        "product_tax": 16.0052,
        "total_tax": 16.0052,
        "discount": 14.864,
        "shipping": {
            "value": 7.25,
            "tax": 0,
            "tax_percent": null,
            "discount": 0,
            "discount_percent": 0
        "created_at": "2017-05-17T10:45:05+01:00",
        "update_at": "2017-05-23T16:55:38+01:00",
        "sent_at": "2017-05-17T11:23:21+01:00",
        "paid_at": "2017-05-17T11:23:21+01:00",
        "currency": "EUR",
        "payment": {
            "type": "multibanco",
            "data": {
                "entity": 88888,
                "reference": 888888888,
                "value": 157.03
            "description": "Multibanco"
        "status": 3,
        "status_alias": "sent",
        "status_description": "Sent",
        "paid": true,
        "is_new": false,
        "invoice_url": "",
        "weight": 0,
        "observations": null,
        "note": null,
        "client_note": null,
        "custom_field": null,
        "tracking_code": null,
        "tracking_url": "",
        "shipping_url": null,
        "coupon": {
            "code": "bajevolp",
            "type": "percent",
            "value": 10
        "shipment_method": "Transportadora",
        "permalink": "",
        "client": {
            "name": "Shopkit",
            "email": "",
            "fiscal_id": "",
            "company": "",
            "is_registered": false,
            "delivery": {
                "name": "Shopkit",
                "phone": "969057993",
                "address": "Centro de Empresas Inovadoras\nAvª do Empresário, 1",
                "address_extra": "S1.08",
                "country": "Portugal - Continental",
                "country_code": "PRT",
                "zip_code": "6000-767",
                "city": "Castelo Branco"
            "billing": {
                "name": "Shopkit",
                "phone": "969057993",
                "address": "Centro de Empresas Inovadoras\nAvª do Empresário, 1",
                "address_extra": ", S1.08",
                "country": "Portugal - Continental",
                "country_code": "PRT",
                "zip_code": "6000-767",
                "city": "Castelo Branco"
        "products": [
                "id": 44753,
                "title": "Shelving Tree with Birds",
                "option": "Azul / Small",
                "reference": "STHFBF7574",
                "price": 77.32,
                "tax": 23,
                "quantity": 1,
                "discount": 7.732,
                "subtotal": 85.59324,
                "discount_percent": 10,
                "weight": 0,
                "url": "",
                "description_short": "This is a tree decal that is created to work with standard 24\" wall shelves that you…",
                "image": {
                    "thumb": "",
                    "square": "",
                    "full": ""
                "id": 44752,
                "title": "Hanging Succulent Planter",
                "option": null,
                "reference": "",
                "price": 71.32,
                "tax": 0,
                "quantity": 1,
                "discount": 7.132,
                "subtotal": 64.188,
                "discount_percent": 10,
                "weight": 0,
                "url": "",
                "description_short": "This stoneware planter/pot has been hand made by me from earthy textured, speckled clay…",
                "image": {
                    "thumb": "",
                    "square": "",
                    "full": ""

Verifying webhooks

In order to ensure the webhook you received is legit, we suggest you verify its signature. To do that, create an HMAC signed using the SHA256 hash algorithm, using your application’s client_secret and the body of the webhook request as keys, and make sure it matches the webhook’s X-Webhook-Signature header.

hash_hmac('sha256', payload, client_secret);


We provide a tool for testing payloads. It's located in the Webhooks section (under the Account settings menu).

This will post a dummy payload to your URL, so you don't need to simulate order events in your store to develop, test and debug.

Last Modified 2017-12-06T17:34:30+00:00