## How it works

The standalone plugin receives events at https://your-site.example/wp-json/spicepay/v1/webhook. Its signature verification protects the order-status update.

## Implementation

Allow POST requests to this HTTPS route through the site's firewall and caching rules. Match the shop's signing secret to the connected plugin account. Observe the delivery response and the order note before assuming a webhook worked. Use only hook names documented by the installed SpicePay release; no cross-brand hook names are required. Test duplicate and delayed deliveries before adding custom fulfilment logic.

## In this area

- Webhook endpoint
- Hooks

## Related guides

- [Webhook events](/docs/payment-api/webhooks/)