aress
intermediate 5 min

Configure Webhooks

Set up Shopify webhook endpoints for order and fulfillment events.

The Reseller API uses Shopify webhooks to receive real-time notifications about orders and fulfillments. Two webhook endpoints need to be configured.

Order webhook

When a customer places an order on your reseller store, Shopify should send the orders/create webhook to:

POST https://api.example.com/v1/orders/webhook

This triggers the order routing pipeline — the platform matches line items to source stores by vendor tag and creates sync jobs to place orders with suppliers.

Fulfillment webhook

When a source store fulfills an order, Shopify should send the fulfillments/create webhook to:

POST https://api.example.com/v1/fulfillments/webhook

This triggers the reverse sync — tracking information is propagated from the source store back to the reseller store, so customers receive shipping confirmations.

HMAC verification

Both webhook endpoints are protected by HMAC-SHA256 signature verification. Shopify signs every webhook payload with your store’s webhook secret, and the API verifies it using:

  • The X-Shopify-Hmac-SHA256 header (base64-encoded signature)
  • The X-Shopify-Shop-Domain header (identifies which store sent it)

The webhook secret is set when you create a reseller or source store — make sure the secret in your Shopify webhook configuration matches the one you provided to the API.

Setting up in Shopify

  1. Go to Settings > Notifications > Webhooks in your Shopify admin
  2. Click Create webhook
  3. For the reseller store, set the orders/create topic pointing to /v1/orders/webhook
  4. For source stores, set the fulfillments/create topic pointing to /v1/fulfillments/webhook
  5. Ensure the webhook secret matches what you provided when creating the store in the API

What’s next?