Setting Up Webhooks

What webhooks do

Webhooks let you receive real-time notifications when key events happen in your account. Use them to push data to Slack, Zapier, Make, or your own internal systems.

Supported events

• conversion.created — Fired when a new conversion is recorded via the API.
• payout.approved — Fired when a payout is moved to Approved status.
• payout.paid — Fired when a payout is marked as Paid.

Payload format

{ "event": "conversion.created", "timestamp": "2026-04-01T12:00:00.000Z", "data": { "conversionId": "...", "influencerSlug": "sarah-jones", "customerId": "cust_123", "conversionValue": 500 } }

Verifying requests

Every request includes an X-Webhook-Signature header containing an HMAC-SHA256 signature of the raw request body, prefixed with sha256=. Use your endpoint's secret (shown on the Webhooks page) to verify it.

const crypto = require('crypto'); function isValid(secret, rawBody, signature) { const expected = 'sha256=' + crypto.createHmac('sha256', secret).update(rawBody).digest('hex'); return crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(signature)); }

Managing endpoints

• Add endpoints on the Webhooks page — select which events each URL should receive.
• Use the Test button to send a sample payload and verify your endpoint is reachable.
• Each endpoint has its own secret. Reveal and copy it from the Webhooks page.
• Endpoints can be temporarily disabled without deleting them.
• Webhook deliveries are fire-and-forget — failed deliveries are not retried automatically.