NowgateDocs

Webhook events

The event Nowgate POSTs to your endpoint when a payment changes.

On this page

See the webhooks guide for event types, signatures and retries.

Payment event#

POSTyour endpoint (you choose the URL)Sent by Nowgate

Nowgate POSTs an event to your endpoint whenever a payment changes. Verify the Nowgate-Signature header before trusting the body:

Nowgate-Signature: t=<unix seconds>,v1=<hex HMAC-SHA256(secret, "<t>.<raw body>")>

Reject events older than 5 minutes, compare signatures in constant time, deduplicate by id, and use data.object.version to ignore stale events (delivery order is not guaranteed). Before shipping goods, retrieve the payment with GET /payments/{id}. Any 2xx response acknowledges the event; others are retried for up to 72 hours.

Headers

  • Nowgate-Signaturestringrequired
  • Nowgate-Event-IdEventID (string)required

Body

  • idEventID (string)required
  • object"event"required
  • typestringrequired

    payment.created, payment.<status>, payment.credited, payment.reversed or payment.deposit_accepted.

    Example: "payment.finished".

  • api_versionstringrequired

    Example: "2026-11-01".

  • environmentstringrequired

    One of: live, sandbox, dev, test.

  • created_atTimestamp (string (date-time))required
  • dataobjectrequired
    1 fields

Responses

200 Any 2xx acknowledges the event.

The event object#

  • idEventID (string)required
  • object"event"required
  • typestringrequired

    payment.created, payment.<status>, payment.credited, payment.reversed or payment.deposit_accepted.

    Example: "payment.finished".

  • api_versionstringrequired

    Example: "2026-11-01".

  • environmentstringrequired

    One of: live, sandbox, dev, test.

  • created_atTimestamp (string (date-time))required
  • dataobjectrequired
    1 fields