webhooks

Ikas Webhook

Changed on

Everything ikas sends to the app's Webhook URL (ZEISO-951).

Two kinds matter. store/app/deleted: the store removed HeyMetra, so its connections close and both halves of the grant are destroyed. And the request ikas sends 48 hours later to delete that store's customers' personal data: HeyMetra keeps none — answers are read live and cached for at most a minute — so it is acknowledged and recorded. Any other signed delivery is acknowledged too, because ikas retries a non-200 three times.

The body is {id, createdAt, scope, merchantId, authorizedAppId, data, signature}; signature is HMAC-SHA256 of data with our client secret. Unsigned is unanswered: 401, nothing touched.

post/api/webhooks/ikas

Request

  • Base URL: https://api.heymetra.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.heymetra.com/api/webhooks/ikas
  • Auth: none declared

Response

Successful Response

unknown required

Changes