paystack-webhooks

name	paystack-webhooks
description	Receive and verify Paystack webhooks. Use when setting up Paystack webhook handlers, debugging x-paystack-signature verification, or handling payment events like charge.success, transfer.success, transfer.failed, refund.processed, subscription.create, or invoice.payment_failed.
license	MIT
metadata	{"author":"hookdeck","version":"0.1.0","repository":"https://github.com/hookdeck/webhook-skills"}

Paystack Webhooks

Paystack is an African payments platform. It notifies your application of payment lifecycle events (charges, transfers, refunds, subscriptions, invoices, disputes) by sending an HTTP POST webhook with a JSON payload to your endpoint.

When to Use This Skill

• How do I receive Paystack webhooks?
• How do I verify the x-paystack-signature header?
• Why is my Paystack webhook signature verification failing?
• How do I handle charge.success, transfer.success, or subscription.create events?
• Understanding Paystack event types and payload structure

Verification (core)

Paystack signs each webhook with HMAC-SHA512 over the raw request body, hex-encoded, in the x-paystack-signature header. The key is your Paystack secret key (sk_test_… / sk_live_…) — the same key you use for API calls. Verify the body — do not before verifying.