Webhooks

Dashboard → Configuration → Webhooks

Configure URLs where Pollar sends event notifications when things happen in your app.

Adding a webhook endpoint

1. Click Add endpoint
2. Enter your URL (must be HTTPS in production)
3. Select which events to receive
4. Copy the Webhook secret — used to verify incoming requests

Verifying webhook signatures

Every request includes an X-Pollar-Signature header. Verify it before processing:

import { createHmac } from 'crypto';

function verifyWebhook(payload: string, signature: string, secret: string): boolean {
  const expected = createHmac('sha256', secret)
    .update(payload)
    .digest('hex');
  return `sha256=${expected}` === signature;
}

Always respond with 200 immediately. Pollar retries failed deliveries with exponential backoff — see Webhooks reference for the full retry policy and event formats.

Event log

Dashboard → Configuration → Webhooks → Event log shows every delivery attempt — timestamp, event type, response code, and latency. Use this to debug failed deliveries or verify that events are being received correctly.