webhooks.xyz

Examples / E-commerce / Shopify

Shopify webhooks

Orders, fulfilments, products, inventory, customers and app lifecycle.

Events

  • orders/create
  • orders/paid
  • fulfillments/update
  • products/update
  • app/uninstalled

Signature

Header X-Shopify-Hmac-Sha256: HMAC-SHA256 of the raw body with the app's client secret, base64 encoded.

✓ A bin checks Shopify signatures: add the app client secret under Signature verification (Shopify).

Check a Shopify signature with the free tool.

Retries

Shopify retries 19 times over about 48 hours, then removes the subscription if every attempt fails.

See a retry schedule in the calculator.

Sample request from Shopifyillustrative, shortened
Content-Typeapplication/jsonX-Shopify-Topicorders/createX-Shopify-Shop-Domainacme-store.myshopify.comX-Shopify-Hmac-Sha256XWmrwMey6OsLMeiZKwP4Fpp…X-Shopify-Webhook-Idb54557e4-bdd9-4b37-8a5f-bf7d70bcd043
{
  "id": 5962420781302,
  "name": "#1042",
  "email": "priya@example.com",
  "created_at": "2026-10-08T12:04:51+05:30",
  "currency": "INR",
  "total_price": "2499.00",
  "financial_status": "paid",
  "customer": { "id": 7480298176758, "first_name": "Priya", "email": "priya@example.com" },
  "line_items": [ { "title": "Cotton kurta", "quantity": 1, "price": "2199.00", "sku": "KRT-M-BLU" } ]
}

Receive Shopify webhooks with webhooks.xyz

Create a bin. Paste its URL into Shopify. Each request shows at once with its headers and body. Add your secret, and each request gets a verified or failed mark. Add your server as a destination, and deliveries retry when it is down. Request an invite.

More in e-commerce: BigCommerce, WooCommerce.