Receive integration partner webhook
Webhooks
Receive integration partner webhook
Receives JSON data from integration partners (e.g. Repediu, Saipos). Authenticates via per-company API key (X-API-Key header), persists to WebhookEvent, and dispatches async processing. Idempotent — duplicate payloads return 200 with status ‘duplicate’.
POST
Receive integration partner webhook
Authorizations
Per-company partner API key (zupy_pk_…). Validated by Zupy against the company integration key hash (Story 14.x); send it on every request as the X-API-Key header. Scoped read-write to the owning company's data.
Headers
Per-company API key for this integration partner
Path Parameters
Integration partner slug (e.g. 'repediu', 'saipos')
Body
application/json
Partner-specific JSON payload