Skip to main content
The SDK already exposes unseen.webhooks.verify. This page pulls back to operational discipline: retries, duplicates, secrets, and headers. See Express integration for raw-body middleware patterns.

​
Headers

Expect X-Unseen-Signature with a hexadecimal HMAC digest of the raw POST body.

​
Operational guidance

Handle duplicate deliveries idempotently (Unseen may retry HTTP 5xx or timeouts). Store and compare paymentId, reference, or event IDs before committing inventory. Next: React SDK — Installation once the backend path—from session creation through signed webhooks—is clear.