tiktok-shop-webhooks

name	tiktok-shop-webhooks
description	Receive and verify TikTok Shop webhooks. Use when setting up TikTok Shop webhook handlers, debugging Authorization-header signature verification, or handling events like ORDER_STATUS_CHANGE, PACKAGE_UPDATE, RECIPIENT_ADDRESS_UPDATE, PRODUCT_STATUS_CHANGE, or SELLER_DEAUTHORIZATION.
license	MIT
metadata	{"author":"hookdeck","version":"0.1.0","repository":"https://github.com/hookdeck/webhook-skills"}

TikTok Shop Webhooks

When to Use This Skill

• How do I receive TikTok Shop webhooks?
• How do I verify TikTok Shop webhook signatures?
• How do I handle ORDER_STATUS_CHANGE or PACKAGE_UPDATE events?
• Why is my TikTok Shop webhook signature verification failing?
• Setting up TikTok Shop webhook handlers and event subscriptions

Verification (core)

TikTok Shop puts the signature in the Authorization header (no Bearer prefix) as a lowercase-hex HMAC-SHA256. The signed message is your app_key concatenated with the raw request body, keyed by your app_secret. Verify against the raw body exactly as received — don't JSON.parse first.

This is not the Standard Webhooks spec and is distinct from TikTok Shop's signing. There is , so it offers no replay protection — dedupe on and reconcile by polling.