---
api: 'Merchant API'
---

# Webhook event

The following webhook event payload is sent as an HTTP POST request to the `url` registered via the [Create a webhook](https://developer.revolut.com/docs/api/merchant#create-webhook) operation.

The delivery of the webhook events happen asynchronously, based on the events you subscribed to.

:::info
For more information, see: [Use webhooks to track order and payment lifecycle](https://developer.revolut.com/docs/guides/merchant/monitor-and-observe/webhooks/using-webhooks).
:::

### IP allowlisting

To ensure secure delivery of webhook events, please allowlist the following IP addresses from which the events originate:

| Environment | Webhook IP addresses |
|-------------|---------------------|
| Production  | `35.246.21.235`, `34.89.70.170` |
| Sandbox     | `35.242.130.242`, `35.242.162.241` |

## Webhook

POST `webhookEvent`

## Parameters

### header parameters

- `Revolut-Request-Timestamp` (string, required)
  The [UNIX timestamp](https://www.unixtimestamp.com/) of the date and time when the webhook event was sent from Revolut. Used to verify the webhook event payload was actually sent by Revolut.
  
  :::info
  For more information, see: [Verify payload signature](https://developer.revolut.com/docs/guides/merchant/monitor-and-observe/webhooks/verify-the-payload-signature)
  :::

- `Revolut-Signature` (string, required)
  The payload signature computed by Revolut using a Hash-based Message Authentication Code (HMAC). Used to verify the webhook event payload was actually sent by Revolut.
  
  :::info
  For more information, see: [Verify payload signature](https://developer.revolut.com/docs/guides/merchant/monitor-and-observe/webhooks/verify-the-payload-signature)
  :::

## Request body

### Attributes

## Returns

### 204

If the webhook event was delivered successfully, we recommend to respond with a `204` code.

:::note
You can respond to and acknowledge the delivery of a webhook event by any HTTP response code between `200-399`.
:::

## Error responses

| HTTP status code | Description |
| --- | --- |
| 4XX | If the webhook event delivery times out or the delivery of the events fails, you can respond with any HTTP `4XX` code. In this case, Revolut will retry sending the webhook event 3 more times, each with a 10-minute delay. |