XRPay Webhooks API

The Webhooks API from XRPay — 3 operation(s) for webhooks.

Operations 6

GET /api/v1/webhooks List webhook endpoints for the current credential mode #
POST /api/v1/webhooks Register a mode-scoped webhook endpoint #
DELETE /api/v1/webhooks Delete a webhook endpoint #
GET /api/v1/webhook-deliveries List webhook delivery status and attempts #
POST /api/v1/webhook-deliveries Replay one webhook delivery with a fresh delivery-attempt cycle #
POST /api/v1/webhooks/{id}/secret Rotate a webhook signing secret #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/xrpay:xrpay-webhooks-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

xrpay-webhooks-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Xrpay Webhooks API
  version: '2026-08-30'
  description: 'Operations tagged Webhooks across 2 of this provider''s published API definitions: xrpay-openapi.json, xrpay-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.xrpay.it
security:
- bearerAuth: []
tags:
- name: Webhooks
paths:
  /api/v1/webhooks:
    get:
      tags:
      - Webhooks
      summary: List webhook endpoints for the current credential mode
      operationId: listWebhookEndpoints
      x-required-scope: webhook.read
      responses:
        '200':
          description: Mode-scoped endpoint list
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WebhookEndpointList'
    post:
      tags:
      - Webhooks
      summary: Register a mode-scoped webhook endpoint
      description: The signing secret is returned only when the endpoint is first created; updating the same URL never reveals it again. Test and live credentials create separate endpoints, even for the same URL.
      operationId: createWebhookEndpoint
      x-required-scope: webhook.write
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/WebhookEndpointCreate'
      responses:
        '201':
          description: Endpoint created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WebhookEndpoint'
        '200':
          description: Existing endpoint updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WebhookEndpoint'
        '400':
          $ref: '#/components/responses/Error'
    delete:
      tags:
      - Webhooks
      summary: Delete a webhook endpoint
      operationId: deleteWebhookEndpoint
      x-required-scope: webhook.write
      parameters:
      - name: id
        in: query
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Endpoint deleted
        '404':
          $ref: '#/components/responses/Error'
    servers:
    - url: https://api.xrpay.it
  /api/v1/webhook-deliveries:
    get:
      tags:
      - Webhooks
      summary: List webhook delivery status and attempts
      operationId: listWebhookDeliveries
      x-required-scope: webhook.read
      parameters:
      - name: status
        in: query
        schema:
          enum:
          - queued
          - delivering
          - delivered
          - failed
      - name: cursor
        in: query
        schema:
          type: string
      - name: limit
        in: query
        schema:
          type: integer
          minimum: 1
          maximum: 100
          default: 25
      responses:
        '200':
          description: Delivery list
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WebhookDeliveryList'
        '400':
          $ref: '#/components/responses/Error'
    post:
      tags:
      - Webhooks
      summary: Replay one webhook delivery with a fresh delivery-attempt cycle
      operationId: replayWebhookDelivery
      x-required-scope: webhook.write
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - delivery_id
              properties:
                delivery_id:
                  type: string
                  pattern: ^dlv_
      responses:
        '202':
          description: Replay accepted
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WebhookDelivery'
        '404':
          $ref: '#/components/responses/Error'
        '409':
          $ref: '#/components/responses/Error'
    servers:
    - url: https://api.xrpay.it
  /api/v1/webhooks/{id}/secret:
    post:
      tags:
      - Webhooks
      summary: Rotate a webhook signing secret
      description: Immediately replaces the endpoint's prior secret. The new secret is returned only in this response.
      operationId: rotateWebhookSecret
      x-required-scope: webhook.write
      parameters:
      - $ref: '#/components/parameters/ResourceId'
      responses:
        '201':
          description: Secret rotated and revealed once
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WebhookSecret'
        '404':
          $ref: '#/components/responses/Error'
    servers:
    - url: https://api.xrpay.it
components:
  schemas:
    WebhookDelivery:
      type: object
      required:
      - object
      - id
      - event_id
      - destination_type
      - endpoint
      - status
      - attempt_count
      - created_at
      - updated_at
      properties:
        object:
          const: webhook_delivery
        id:
          type: string
          pattern: ^dlv_
        event_id:
          type: string
          pattern: ^evt_
        event_type:
          type:
          - string
          - 'null'
        destination_type:
          enum:
          - webhook_endpoint
          - platform_connection
        destination_id:
          type: string
        endpoint:
          type: string
          format: uri
        status:
          enum:
          - queued
          - delivering
          - delivered
          - failed
        attempt_count:
          type: integer
          minimum: 0
        last_status_code:
          type:
          - integer
          - 'null'
        last_error:
          type:
          - string
          - 'null'
        delivered_at:
          type:
          - string
          - 'null'
          format: date-time
        created_at:
          type: string
          format: date-time
        updated_at:
          type: string
          format: date-time
    Error:
      type: object
      required:
      - error
      properties:
        error:
          type: object
          required:
          - type
          - message
          properties:
            type:
              type: string
            code:
              type:
              - string
              - 'null'
            message:
              type: string
    WebhookDeliveryList:
      type: object
      required:
      - object
      - data
      - has_more
      - next_cursor
      properties:
        object:
          const: list
        data:
          type: array
          items:
            $ref: '#/components/schemas/WebhookDelivery'
        has_more:
          type: boolean
        next_cursor:
          type:
          - string
          - 'null'
          pattern: ^dlv_
    WebhookEndpointList:
      type: object
      required:
      - object
      - data
      properties:
        object:
          const: list
        data:
          type: array
          items:
            $ref: '#/components/schemas/WebhookEndpoint'
    WebhookEndpoint:
      type: object
      required:
      - object
      - id
      - url
      - events
      - is_active
      - livemode
      properties:
        object:
          const: webhook_endpoint
        id:
          type: string
        name:
          type: string
        url:
          type: string
          format: uri
        events:
          type: array
          items:
            type: string
        secret:
          type: string
          description: Signing secret. Returned only when an endpoint is first created.
        secret_revealed:
          type: boolean
        is_active:
          type: boolean
        livemode:
          type: boolean
        created_at:
          type: string
          format: date-time
    WebhookSecret:
      type: object
      required:
      - object
      - webhook_id
      - secret
      - secret_revealed
      - livemode
      - rotated_at
      properties:
        object:
          const: webhook_secret
        webhook_id:
          type: string
        secret:
          type: string
          pattern: ^whsec_
        secret_revealed:
          const: true
        livemode:
          type: boolean
        rotated_at:
          type: string
          format: date-time
    WebhookEndpointCreate:
      type: object
      additionalProperties: false
      required:
      - url
      - events
      properties:
        name:
          type: string
          maxLength: 200
        url:
          type: string
          format: uri
          description: A public HTTPS endpoint.
        events:
          type: array
          minItems: 1
          uniqueItems: true
          items:
            enum:
            - payment.created
            - payment.processing
            - payment.confirmed
            - payment.failed
            - payment.canceled
            - payment.refunded
            - payment.swept
            - refund.created
            - refund.completed
            - refund.failed
            - payout.created
            - payout.processing
            - payout.action_required
            - payout.partially_completed
            - payout.completed
            - payout.failed
            - payroll.run.created
            - payroll.run.approved
            - payroll.run.processing
            - payroll.run.action_required
            - payroll.run.partially_completed
            - payroll.run.completed
            - payroll.run.failed
            - payroll.payment.completed
            - payroll.payment.failed
            - payroll.payment.action_required
            - checkout.session.completed
            - checkout.session.expired
            - escrow.created
            - escrow.released
            - escrow.cancelled
            - invoice.created
            - invoice.sent
            - invoice.paid
            - b2b.order.created
            - b2b.order.paid
            - b2b.order.shipped
  responses:
    Error:
      description: Error response
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
  parameters:
    ResourceId:
      name: id
      in: path
      required: true
      schema:
        type: string
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: Secret API key or XRPay Connect access token.
x-refined-from:
- xrpay-openapi.json
- xrpay-openapi.yml