Skip to content

Webhooks

Webhooks let your application receive real-time HTTP notifications when events occur in your Invoro account - such as an invoice being delivered or a Peppol participant being activated.

  1. You register a webhook URL in the Invoro app
  2. You select which events to subscribe to
  3. When an event occurs, Invoro sends a POST request to your URL with a JSON payload
  4. Your endpoint responds with a 2xx status code to acknowledge receipt
  1. Go to Developers > Webhooks in the Invoro app
  2. Click Add Webhook
  3. Enter your HTTPS endpoint URL
  4. Select the events you want to receive
  5. Click Add - your webhook secret will be shown once, save it securely

Every webhook delivery is a POST request with these headers:

HeaderDescription
Content-Typeapplication/json
X-Signature-SHA256HMAC-SHA256 signature for payload verification
X-Webhook-EventThe event type (e.g., invoice.delivered)

The request body is a JSON object containing the event data. See Events for payload details.

Your endpoint must return a 2xx HTTP status code within 30 seconds. Any other response (or timeout) is treated as a failure and will be retried.

Recommended approach:

  1. Receive the webhook
  2. Verify the signature
  3. Store the event for processing
  4. Return 200 OK immediately
  5. Process the event asynchronously

This ensures you respond quickly and avoid timeout failures.

Use the Test button on any webhook in the Invoro app to send a test delivery with sample data. Test deliveries include "is_test": true in the payload.