PayPal · Schema
Verify Webhook Signature
A verify webhook signature request.
BillingCommerceDisputesInvoicesOrderPaymentsPayoutsSubscriptionTokensWebhook
Properties
| Name | Type | Description |
|---|---|---|
| auth_algo | string | The algorithm that PayPal uses to generate the signature and that you can use to verify the signature. Extract this value from the `PAYPAL-AUTH-ALGO` response header, which is received with the webhoo |
| cert_url | string | The X.509 public key certificate. Download the certificate from this URL and use it to verify the signature. Extract this value from the `PAYPAL-CERT-URL` response header, which is received with the w |
| transmission_id | string | The ID of the HTTP transmission. Contained in the `PAYPAL-TRANSMISSION-ID` header of the notification message. |
| transmission_sig | string | The PayPal-generated asymmetric signature. Appears in the `PAYPAL-TRANSMISSION-SIG` header of the notification message. |
| transmission_time | string | The date and time of the HTTP transmission, in [Internet date and time format](https://tools.ietf.org/html/rfc3339#section-5.6). Appears in the `PAYPAL-TRANSMISSION-TIME` header of the notification me |
| webhook_id | string | The ID of the webhook as configured in your Developer Portal account. |
| webhook_event | object |
JSON Schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "#/components/schemas/verify_webhook_signature",
"title": "Verify Webhook Signature",
"type": "object",
"description": "A verify webhook signature request.",
"properties": {
"auth_algo": {
"type": "string",
"maxLength": 100,
"pattern": "^[a-zA-Z0-9]+$",
"description": "The algorithm that PayPal uses to generate the signature and that you can use to verify the signature. Extract this value from the `PAYPAL-AUTH-ALGO` response header, which is received with the webhook notification."
},
"cert_url": {
"type": "string",
"maxLength": 500,
"format": "uri",
"description": "The X.509 public key certificate. Download the certificate from this URL and use it to verify the signature. Extract this value from the `PAYPAL-CERT-URL` response header, which is received with the webhook notification."
},
"transmission_id": {
"type": "string",
"maxLength": 50,
"pattern": "^(?!\\d+$)\\w+\\S+",
"description": "The ID of the HTTP transmission. Contained in the `PAYPAL-TRANSMISSION-ID` header of the notification message."
},
"transmission_sig": {
"type": "string",
"maxLength": 500,
"pattern": "^(?!\\d+$)\\w+\\S+",
"description": "The PayPal-generated asymmetric signature. Appears in the `PAYPAL-TRANSMISSION-SIG` header of the notification message."
},
"transmission_time": {
"type": "string",
"maxLength": 100,
"format": "date-time",
"description": "The date and time of the HTTP transmission, in [Internet date and time format](https://tools.ietf.org/html/rfc3339#section-5.6). Appears in the `PAYPAL-TRANSMISSION-TIME` header of the notification message."
},
"webhook_id": {
"type": "string",
"maxLength": 50,
"pattern": "^[a-zA-Z0-9]+$",
"description": "The ID of the webhook as configured in your Developer Portal account."
},
"webhook_event": {
"$ref": "#/components/schemas/event"
}
},
"required": [
"auth_algo",
"cert_url",
"transmission_id",
"transmission_sig",
"transmission_time",
"webhook_id",
"webhook_event"
]
}
Work with this as data
Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for schemas
4 MCP tools reach this
find_json_schemasBrowse and filter every JSON Schema in the catalog.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/paypal-verify-webhook-signature"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"
Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.