My Webhook Never Fired

Confirm the payment actually completed

A webhook only fires on a completed payment. If the link is still pending there is nothing to send. See Customer paid but it still says pending.

Brykto calls your server from ours, so:

It must be https, not http.
It must be a public address. localhost and private network addresses can never work.
It cannot sit behind a login or a firewall that blocks us.

For local development, use a tunnelling tool that gives you a public HTTPS address.

Brykto waits 10 seconds. Longer than that and the attempt counts as failed.

Reply straight away and do the slow work afterwards. Take the payload, return your response, then process it.

Three attempts, 30 seconds apart. After that it gives up.

The number of attempts and the last error are recorded against the payment, which usually points straight at the problem.

If your verification is wrong, genuine calls look fake and get discarded silently.

The two usual mistakes are signing the body on its own instead of {timestamp}.{body}, and forgetting that the header value starts with sha256=.

See Webhook Security for code that works.