OptionaldefaultWebhookSecret: stringRaw JSON string body or Uint8Array/Buffer from request
Value of 'x-marzpay-signature' (or 'x-signature') header
Optionalsecret: string
Optional override secret key (defaults to config webhookSecret)
Max timestamp drift tolerance (default 300s / 5 minutes)
Register a new dashboard webhook endpoint.
Delete webhook registration.
Get webhook registration detail by UUID.
List registered dashboard webhooks.
Parse and auto-normalize incoming webhook / callback payload. Handles both direct per-request callbacks and dashboard-wrapped webhooks into a strongly-typed event.
Raw JSON string or parsed JSON object
Update existing webhook registration.
Verify HMAC signature of an incoming webhook payload.
Raw JSON request body string or Uint8Array/Buffer
Value of 'x-marzpay-signature' (or 'x-signature') header
Optionalsecret: string
Secret key for signing (defaults to config webhookSecret)
OptionaltimestampHeader: string | null
Optional value of 'x-marzpay-timestamp' header
Construct and verify a webhook event from a raw body string or buffer and signature header. Validates HMAC signature and timestamp tolerance before returning the strongly-typed event.