Webhooks
Webhooks let NumroQ notify your server when something happens on your account, instead of you having to poll for changes. You register an endpoint URL once, and NumroQ posts events to it.
Setting up
Configure your endpoint URL in the developer portal. Your endpoint should accept a POST, return a 2xx status quickly, and do any slow work afterwards so deliveries are not held open.
Verifying every event
Each delivery is signed with an HMAC signature so you can be sure it really came from NumroQ and was not forged. To verify, compute the HMAC of the raw request body using your webhook secret and compare it, in constant time, to the signature header. Reject anything that does not match. Always verify before you act on an event.
Testing before you go live
Send a test event from the portal to confirm two things: that your endpoint is reachable from the internet, and that your signature verification accepts a genuine event. Only then point real traffic at it.
What if my endpoint is down?
Build your handler to be idempotent (safe to receive the same event more than once) and return quickly. Verify the signature, record the event, and process it asynchronously.