Skip to content
QRGlo
← All articles

Webhooks

Add an https URL under Developers → Webhooks and choose events: scans, codes created, changed or archived. We send a JSON POST within seconds.

Check the QRGlo-Signature header: t is the send time, v1 is an HMAC-SHA256 of "t.body" using your signing secret. Reject requests whose time is far from now.

A webhook that fails 5 times in a row is paused and you get a notification. Resume it once your endpoint is back.

Answering a webhook

Reply with any 2xx status within 5 seconds. Do slow work after you have replied, for example by putting the event on a queue. A slow or failing reply counts as a failure.

Recent deliveries are listed under the webhook with the event, the status your server returned and how long it took.

API and webhooks

API reference

Still stuck? Email us at support@qrglo.com