Webhooks
A webhook sends your store's event data to an external URL in real time. You create one by choosing an event, a format, and a destination URL, from Settings, Notifications, Webhooks.
On this page
A webhook lets an external system receive your store's data the moment an event happens, instead of asking for it over and over. You create one by choosing the store event to listen for, the format of the data, and the URL it is sent to. Tanqory then sends the event data to that URL each time the event occurs, and it generates a signing secret you can use to confirm the requests really came from your store. You reach it from Settings, under Notifications, then Webhooks.
What you set for a webhook
| Field | What it is |
|---|---|
| Event | The store event that triggers the webhook, such as Order creation or Cart creation |
| Format | The format the data is sent in, JSON or XML |
| URL | The endpoint the data is sent to |
| Webhook API version | The version the payload follows, such as 2025-01 |
Before you begin
- Your role includes General settings.
- You have a reachable HTTPS endpoint ready to receive the data.
- Open Settings, then Notifications, then Webhooks, to create and manage webhooks.
Create a webhook
From the admin, open Settings > Notifications, then Webhooks. The page shows a Create webhook button and, once you have created one, a Webhook signing secret. Before that it reads No webhooks.
Select Create webhook to open the Add webhook dialog. It has four fields: Event, Format, URL, and Webhook API version. Fill them in and select Save to create the webhook.
- Choose the event. The Event field is a list of the store events you can listen for, such as Cart creation, Order creation, Order fulfilled, Product update, Customer creation, and Refund creation. Choose the single event your integration needs to react to. Subscribe to only the events you actually use, so your endpoint is not sent data it will ignore.
- Choose the format and enter the URL. Set Format to JSON or XML, matching what your endpoint expects. In URL, enter the address the data is sent to, for example an HTTPS endpoint on your own service. Use an endpoint that is reachable and answers quickly, because the data is delivered to it the moment the event happens.
- Pick the API version. Webhook API version sets the structure of the data that is sent, here 2025-01. Keep it fixed so your endpoint keeps reading the payload the same way, and change it only when you have updated your endpoint to match a newer version.
- Save and use the signing secret. Select Save to create the webhook. Once a webhook exists, the Webhook signing secret on the Webhooks page is generated. Use it to verify that incoming requests genuinely came from your store, so a third party cannot send fake events to your endpoint.
Best practices
- Subscribe to only the events you use. One webhook listens for one event, so add only the events your integration reacts to and avoid unnecessary traffic.
- Use a reachable HTTPS endpoint. The data is sent the moment an event happens, so the endpoint should be online and answer quickly.
- Verify requests with the signing secret. Checking the signature confirms the data came from your store rather than an impostor.
- Keep the API version fixed. Your endpoint expects one payload structure, so change the version only after your endpoint is ready for it.
If something goes wrong
- Your endpoint is not receiving data. Confirm the URL is correct and the endpoint is reachable and returns a success response.
- You are not sure a request is genuine. Verify it against the Webhook signing secret before acting on it.
- You cannot create a webhook. Your role may not allow managing settings. Ask an owner or admin.
Next steps
Related articles
Still stuck?
- Ask Tanqory AIAsk in your own words. It answers from these articles and links the ones it used.
- Ask in your adminThe assistant in your Tanqory admin answers and makes the change for you once you confirm.
- Contact TanqoryWrite to our privacy, security or legal teams, or talk to sales about a plan or a move.
