Merchant webhooks

Authorization: Bearer mk_live_<your_key>

GET /api/merchant/v1/stores/{storeId}/webhooks

{
  "webhooks": [
    {
      "id": "clxyz...",
      "storeId": "cm...",
      "name": "Orders to backend",
      "url": "https://example.com/webhooks/markt",
      "secretPrefix": "a1b2",
      "events": ["order.completed"],
      "enabled": true,
      "failureCount": 0,
      "disabledAt": null,
      "lastDeliveredAt": "2026-09-21T12:00:00.000Z",
      "createdAt": "2026-09-21T11:00:00.000Z",
      "updatedAt": "2026-09-21T12:00:00.000Z"
    }
  ]
}

POST /api/merchant/v1/stores/{storeId}/webhooks

{
  "name": "Orders to backend",
  "url": "https://example.com/webhooks/markt",
  "events": ["order.created", "order.completed", "order.refunded", "product.updated"]
}

GET    /api/merchant/v1/stores/{storeId}/webhooks/{webhookId}
PATCH  /api/merchant/v1/stores/{storeId}/webhooks/{webhookId}
DELETE /api/merchant/v1/stores/{storeId}/webhooks/{webhookId}

{
  "name": "Renamed",
  "url": "https://example.com/webhooks/markt",
  "events": ["order.completed"],
  "enabled": false
}

POST /api/merchant/v1/stores/{storeId}/webhooks/{webhookId}/rotate

POST /api/merchant/v1/stores/{storeId}/webhooks/{webhookId}/test

GET /api/merchant/v1/stores/{storeId}/webhooks/{webhookId}/deliveries

{
  "deliveries": [
    {
      "id": "cldel...",
      "webhookId": "clxyz...",
      "eventId": "evt_…",
      "event": "order.completed",
      "attempt": 1,
      "status": "success",
      "responseCode": 200,
      "responseBodyPreview": "ok",
      "errorMessage": null,
      "durationMs": 84,
      "createdAt": "2026-09-21T12:00:00.000Z"
    }
  ]
}

# raw body must be the exact JSON bytes
# header: X-Markt-Signature: t=<unix>,v1=<hex>
# HMAC-SHA256(secret, `${t}.${rawBody}`)