Webhooks

Last updated: April 2026 · Suggest an edit

Webhook signing & replay

Each webhook ships an X-SellersSense-Signature header — HMAC-SHA256 of the raw body using your endpoint's secret. Always verify before trusting the payload.

// pseudocode
expected = hmac_sha256(secret, raw_body)
if (header != expected) reject();

Failed deliveries retry with exponential backoff (1m, 5m, 30m, 2h, 12h). After the 5th failure the endpoint is paused and a notification fires to your account email.

---

Was this helpful?

← Back to help center · Suggest an edit