Docs · Webhooks

Webhook events

Subscribe a URL to a set of event names and receive HMAC-signed POSTs with a JSON payload. Failed deliveries retry with exponential backoff and surface in the admin /webhooks/{id}/deliveries view for manual replay.

Subscribe

curl -X POST 'http://143.110.171.125:4000/v1/webhooks/subscriptions' \
  -H 'X-API-Key: lum_live_REPLACE_ME' \
  -H 'Content-Type: application/json' \
  -d '{
    "url": "https://your-app.example.com/webhooks/lumirecrm",
    "events": ["deposit.settled", "withdrawal.requested"]
  }'

Verify the signature

Each delivery includes X-LumireCRM-Signature (hex HMAC-SHA256 over the raw body using your subscription secret) and X-LumireCRM-Event (the event name). Re-compute and compare in constant time.

Test a subscription

curl -X POST 'http://143.110.171.125:4000/v1/webhooks/subscriptions/{id}/test' \
  -H 'X-API-Key: lum_live_REPLACE_ME'

Event catalogue