Shopify webhooks, without the lost events
Receive Shopify webhooks reliably: HMAC verified on arrival, stored before Shopify gets its answer, and retried to your app until it succeeds.
Common problems, solved
- Shopify expects a fast answer, and slow handlers count as failures.
- HookStead answers Shopify within milliseconds of storing the event, then delivers to your app with its own timeouts and retries.
- Repeated failures can get a webhook subscription removed.
- Because HookStead accepts every valid delivery, Shopify sees a healthy endpoint even while your app is down. You get an alert instead.
- orders/create arrives twice and an order is fulfilled twice.
- Use the stable webhook-id on HookStead's deliveries to process each event exactly once.
Set up in five minutes
- 01Create a source in HookStead with the “Shopify signature” option and paste your app's client secret.
- 02Subscribe to the topics you need with the source URL as the address.
- 03Add your app as a destination and connect it to the source.
- 04Trigger a test notification and watch it in the dashboard.
| Source option | Shopify signature |
|---|---|
| Signature header | X-Shopify-Hmac-Sha256 |
| Scheme | HMAC-SHA256 over the raw body with your app's client secret, base64-encoded |