Overview

Use Webhooks to be notified of events in the Manifest platform. Note: Currently, Manifest supports one webhook per event, per environment.

Structure

When receiving a webhook notification, there will be an event and id fields:

{
    "event": "account_connection.update",
    "id": "acon_XXXXX",
    "timestamp": 1644893096,
    "user_data": {}
}

Validation (Optional)

Validating that webhooks originate from Manifest ensures that a webhook notification is authentic. If a webhook object has been created with the basic_user or basic_secret fields, notifications from Manifest will include an additional Authorization header that is the base64-encoded value of {basic_user}:{basic_secret}. When the base64 header matches the value your application expects, the request is authentic.

Example Header
Authorization: Basic YmVzdXJldG86ZHJpbmt5b3Vyb3ZhbHRpbmU=

Methods

POST  /webhook
Subscribe to a type of event.

Body Parameters

url
string
required

The HTTPS URL where the event notification will be sent.

event
string
required

Event to subscribe to. See below for a list of available events.

basic_user
string

First value in base64(basic_user:basic_secret), sent as Authorization for request validation. This field will not appear in responses.

basic_secret
string

Second value in base64(basic_user:basic_secret), sent as Authorization for request validation. This field will not appear in responses.

user_data
object

User defined data that can be attached to the object. See the User Data page for details.

Example

// POST /webhook
{
    "url": "https://app.yoursite.com/webhook",
    "event": "payout.update"
}

Properties

id
string

Identifier for this webhook.

url
string

The HTTPS URL where the event notification will be sent.

event
string

Event to subscribe to. Possible values are:

  • account_connection.update
  • payout.update
  • buyer.update
  • purchase.update
basic_user
string

First value in base64(basic_user:basic_secret), sent as Authorization for request validation. This field will not appear in responses.

basic_secret
string

Second value in base64(basic_user:basic_secret), sent as Authorization for request validation. This field will not appear in responses.

user_data
object

User defined data that can be attached to the object. See the User Data section for details.