| name | paystack-webhooks |
| description | Receive and verify Paystack webhooks. Use when setting up Paystack webhook handlers, debugging x-paystack-signature verification, or handling payment events like charge.success, transfer.success, transfer.failed, refund.processed, subscription.create, or invoice.payment_failed.
|
| license | MIT |
| metadata | {"author":"hookdeck","version":"0.1.0","repository":"https://github.com/hookdeck/webhook-skills"} |
Paystack Webhooks
Paystack is an African payments platform. It notifies your application of payment
lifecycle events (charges, transfers, refunds, subscriptions, invoices, disputes)
by sending an HTTP POST webhook with a JSON payload to your endpoint.
When to Use This Skill
- How do I receive Paystack webhooks?
- How do I verify the
x-paystack-signature header?
- Why is my Paystack webhook signature verification failing?
- How do I handle
charge.success, transfer.success, or subscription.create events?
- Understanding Paystack event types and payload structure
Verification (core)
Paystack signs each webhook with HMAC-SHA512 over the raw request body,
hex-encoded, in the x-paystack-signature header. The key is your Paystack
secret key (sk_test_… / sk_live_…) — the same key you use for API calls.
Verify the body — do not before verifying.
