Morapay Developer Docs

Webhooks notify your server when payments complete, batches dispatch, subscriptions change, and other lifecycle events occur. Base path: /api/v1/merchant/webhooks

Endpoints

Method	Path	Description
`GET`	`/webhooks/endpoints`	List endpoints
`POST`	`/webhooks/endpoints`	Create endpoint
`PATCH`	`/webhooks/endpoints/:id`	Update URL or events
`DELETE`	`/webhooks/endpoints/:id`	Delete endpoint
`POST`	`/webhooks/endpoints/:id/reveal-secret`	Reveal signing secret
`GET`	`/webhooks/endpoints/:id/summary`	Delivery stats
`GET`	`/webhooks/deliveries`	List delivery attempts
`POST`	`/webhooks/deliveries/:id/retry`	Retry failed delivery

List endpoints

GET /api/v1/merchant/webhooks/endpoints

curl -s "https://api.morapay.io/api/v1/merchant/webhooks/endpoints" \
  -H "Morapay-Key: $MORAPAY_PUBLIC_KEY" \
  -H "Morapay-Timestamp: $TIMESTAMP" \
  -H "Morapay-Signature: v1=$SIGNATURE"

200 OK

{
  "success": true,
  "data": [
    {
      "id": "wh_ep_uuid",
      "url": "https://api.example.com/webhooks/morapay",
      "events": ["payment_link.paid"],
      "displayName": "Production"
    }
  ]
}

401 Unauthorized

{
  "success": false,
  "error": "Invalid request signature.",
  "code": "auth.signature.mismatch",
  "requestId": "req_wh401"
}

Create endpoint

POST /api/v1/merchant/webhooks/endpoints

Field	Type	Required	Description
`url`	string	Yes	HTTPS callback URL
`events`	string[]	Yes	Event types to subscribe
`displayName`	string	No	Dashboard label

curl -s -X POST "https://api.morapay.io/api/v1/merchant/webhooks/endpoints" \
  -H "Content-Type: application/json" \
  -H "Morapay-Key: $MORAPAY_PUBLIC_KEY" \
  -H "Morapay-Timestamp: $TIMESTAMP" \
  -H "Morapay-Signature: v1=$SIGNATURE" \
  -d '{
    "url": "https://api.example.com/webhooks/morapay",
    "events": ["payment_link.paid", "payout.status_updated"]
  }'

201 Created

{
  "success": true,
  "data": {
    "id": "wh_ep_uuid",
    "url": "https://api.example.com/webhooks/morapay",
    "events": ["payment_link.paid", "payout.status_updated"],
    "secretHint": "whsec_...abcd"
  }
}

400 Bad Request

{
  "success": false,
  "error": "url must be a valid HTTPS URL.",
  "code": "request.invalid",
  "requestId": "req_wh_url"
}

403 Forbidden

{
  "success": false,
  "error": "Your role or key does not allow this action.",
  "code": "FORBIDDEN_MERCHANT_ROLE",
  "requestId": "req_wh403"
}

Update and delete

PATCH /api/v1/merchant/webhooks/endpoints/:id

curl -s -X PATCH "https://api.morapay.io/api/v1/merchant/webhooks/endpoints/wh_ep_uuid" \
  -H "Content-Type: application/json" \
  -H "Morapay-Key: $MORAPAY_PUBLIC_KEY" \
  -H "Morapay-Timestamp: $TIMESTAMP" \
  -H "Morapay-Signature: v1=$SIGNATURE" \
  -d '{ "url": "https://api.example.com/v2/morapay" }'

DELETE /api/v1/merchant/webhooks/endpoints/:id

{
  "success": true,
  "data": { "deleted": true }
}

Reveal secret

POST /api/v1/merchant/webhooks/endpoints/:id/reveal-secret Returns the signing secret once per call. Store it securely.

curl -s -X POST "https://api.morapay.io/api/v1/merchant/webhooks/endpoints/wh_ep_uuid/reveal-secret" \
  -H "Morapay-Key: $MORAPAY_PUBLIC_KEY" \
  -H "Morapay-Timestamp: $TIMESTAMP" \
  -H "Morapay-Signature: v1=$SIGNATURE"

{
  "success": true,
  "data": {
    "secret": "whsec_live_abc123xyz"
  }
}

Verify inbound webhooks per the Webhooks guide.

Deliveries

GET /api/v1/merchant/webhooks/deliveries?endpointId=&from=&to= POST /api/v1/merchant/webhooks/deliveries/:id/retry

curl -s -X POST "https://api.morapay.io/api/v1/merchant/webhooks/deliveries/delivery_uuid/retry" \
  -H "Morapay-Key: $MORAPAY_PUBLIC_KEY" \
  -H "Morapay-Timestamp: $TIMESTAMP" \
  -H "Morapay-Signature: v1=$SIGNATURE"

202 Accepted

{
  "success": true,
  "data": {
    "id": "delivery_uuid",
    "status": "QUEUED"
  }
}

404 Not Found

{
  "success": false,
  "error": "Webhook endpoint not found.",
  "code": "resource.not_found",
  "requestId": "req_wh404"
}

Common event types

Event	When
`payment_link.paid`	Payer completes checkout on a link
`payout.status_updated`	Disbursement recipient status changes
`disbursement_batch.created`	Batch scheduled or created
`subscription.charge.succeeded`	Recurring charge succeeds

Full list: Webhooks guide.

Getting started

Payments

Money movement

Account

Recurring and events

Public checkout

Catalog

Webhooks

Endpoints

List endpoints

Create endpoint

Update and delete

Reveal secret

Deliveries

Common event types

​Endpoints

​List endpoints

​Create endpoint

​Update and delete

​Reveal secret

​Deliveries

​Common event types

​Related

Endpoints

List endpoints

Create endpoint

Update and delete

Reveal secret

Deliveries

Common event types

Related