Webhook endpoints

Webhook endpoints are HTTPS URLs owned by your COPE business. Register endpoints in the COPE dashboard and subscribe each endpoint to the event types your integration is ready to process.

Endpoint requirements

Requirement	Detail
URL	Public HTTPS URL, such as `https://checkout.example.com/cope/webhooks`
Method	`POST`
Body	JSON: `id`, `type`, `version`, `source`, `created_at`, `occurred_at`, `data`
Response	Return 2xx only after durable acceptance
Ownership	Endpoints belong to the authenticated COPE business

An endpoint’s signing secret is returned only when the endpoint is created and when its secret is rotated. Store it securely and verify every delivery before parsing the event payload. See Rotating the signing secret.

​Webhook endpoints

​Endpoint requirements

Webhook endpoints

Endpoint requirements