Your API credentials

Find your keys in the Developer section of your 3ribe dashboard.

Keep secret keys backend-only.
DocumentationWebhook API
VERSION 1.0 / REST / JSON / HTTPS

Webhook API

Register and retrieve the webhook URL for your merchant account. Use the Webhook Management API to configure where 3ribe can send payment notifications.

Configuration, not the incoming event contract
These endpoints manage your receiver URL. The source does not define incoming notification payloads, event types, signatures, retries or acknowledgement requirements. Confirm those separately with 3ribe.
GET STARTED

Environments & authentication

The Webhook API uses the same environments as the Collection API. All requests must use HTTPS. Keep sandbox and production configuration separate.

EnvironmentBase URLEnvironment / Base URL
SandboxDevelopment & testing
https://merchantb2bstagingapi.3ribestaging.com
ProductionAfter testing & approval
https://businessapis.3ribe.io

Required request headers

Obtain your merchant credentials from the Developer section of your 3ribe dashboard. Send these headers for both setup and retrieval.

Authentication headersHTTP
apikey: YOUR_API_KEY
apisecretkey: YOUR_API_SECRET_KEY
Content-Type: application/json
ParameterDescriptionParameter / Description
apikeyHeader
Merchant API key.
apisecretkeyHeader
Merchant API secret key.
Content-TypeHeader
application/json
Make management requests from your backend
Store API credentials securely. Never expose credentials or the API secret key in browser or mobile application code.

Endpoint reference

The endpoint summary and sandbox examples document the following routes.

POST/api/collection/setupwebhook
GET/api/collection/getwebhook
Confirm production routes before going live
The source is inconsistent: the summary and sandbox use /api/collection/..., while the production examples use /collection/api/.... Operation headings also omit /api. Do not assume these paths are interchangeable; confirm the production routes with 3ribe.
Source locationDocumented routeSource location / Documented route
Sandbox · setupPOST
https://merchantb2bstagingapi.3ribestaging.com/api/collection/setupwebhook
Sandbox · retrieveGET
https://merchantb2bstagingapi.3ribestaging.com/api/collection/getwebhook
Production example · setupPOST · confirmation required
https://businessapis.3ribe.io/collection/api/setupwebhook
Production example · retrieveGET · confirmation required
https://businessapis.3ribe.io/collection/api/getwebhook
Operation headingsNot canonical routes
/collection/setupwebhook and /collection/getwebhook appear in the individual endpoint headings.
WEBHOOK MANAGEMENT

Setup webhook URL

POST/api/collection/setupwebhook

Register or configure the HTTPS webhook URL associated with your merchant account. 3ribe validates the URL and returns the configuration result. An HTTP receiver URL will not be accepted.

Request body · source local exampleJSON
{
  "webHookUrl": "https://localhost:44374/api/collection/setupwebhook"
}
localhost is an example, not a production receiver
The supplied request uses a local development URL. For production, register your own deployed, publicly reachable HTTPS endpoint capable of receiving webhook notifications. Deploy the receiver before registering it.

Request parameter

ParameterDescriptionParameter / Description
webHookUrlString · Required
The HTTPS endpoint on your server where webhook notifications will be received. Preserve this exact field casing.

Successful setup

Successful responseJSON
{
  "responseMessage": "Webhook Url set up is successful!",
  "responseStatus": true
}
ParameterDescriptionParameter / Description
responseMessageString
Confirmation that the URL was configured successfully.
responseStatusBoolean
true indicates successful setup. This is a configuration result, not a payment event.

Failed setup · HTTPS required

Failed responseJSON
{
  "responseMessage": "Webhook Url must be a secured url with https",
  "responseStatus": false
}

Failure condition: responseStatus is false. Ensure the receiver URL begins with https:// and submit the setup request again.

Try it in Postman

  1. 01Set the method to POST and the sandbox request URL to {{baseurl}}/api/collection/setupwebhook, with {{baseurl}} set to the sandbox host above.
  2. 02Add apikey, apisecretkey and Content-Type: application/json in Headers.
  3. 03In Body, choose raw and JSON. Submit the webHookUrl request shown above with your intended receiver URL and inspect responseStatus.

Get webhook URL

GET/api/collection/getwebhook

Retrieve the webhook URL configured for the authenticated merchant account. The merchant credentials identify the account. The supplied specification requires no request body.

RequestRequirementRequest / Requirement
AuthenticationRequired
apikey, apisecretkey and Content-Type: application/json headers.
Request bodyNone
No body parameters are specified for this operation.

Successful retrieval

Successful response · source local exampleJSON
{
  "responseMessage": "Webhook Url retrieved successful!",
  "responseStatus": true,
  "webHookUrl": "https://localhost:44374/api/collection/setupwebhook"
}
ParameterDescriptionParameter / Description
responseMessageString
Confirmation that the configured URL was retrieved.
responseStatusBoolean
true indicates successful retrieval.
webHookUrlString
The URL currently registered for the merchant. The localhost value shown is a source example only.

Failed retrieval · not configured

Webhook not configuredJSON
{
  "responseMessage": "Webhook url not set up",
  "responseStatus": false,
  "webHookUrl": ""
}

When no webhook URL is configured, responseStatus is false, responseMessage explains that setup is missing and webHookUrl is an empty string. Call Setup Webhook URL to register a receiver.

Try it in Postman

  1. 01Set the method to GET and use {{baseurl}}/api/collection/getwebhook with the sandbox base URL.
  2. 02Add the same three authentication and content-type headers. Leave the request body empty.
  3. 03Send the request. Confirm responseStatus is true and compare webHookUrl with the endpoint you intended to register.

Configuration sequence

Configure the receiver first, then verify that 3ribe has stored the correct URL for the merchant.

  1. 01Develop and deploy a webhook receiver on your backend. Ensure it is publicly accessible over HTTPS and can accept incoming HTTP requests.
  2. 02Call Setup Webhook URL with your merchant API credentials. Put the intended receiver address in the exact webHookUrl field.
  3. 03Inspect the setup response and confirm responseStatus is true. Log the configuration result for troubleshooting and audit.
  4. 04Call Get Webhook URL using the same merchant credentials.
  5. 05Confirm the returned webHookUrl matches your intended endpoint. Retrieve it periodically to check the registered configuration.
Confirm the receiver contract before event processing
A successfully registered URL does not define how incoming notifications should be validated or acknowledged. Agree the incoming event contract with 3ribe before enabling payment-event processing.

Security & event contract

Secure the management integration

RequirementImplementation guidanceRequirement / Implementation guidance
HTTPS only
Use HTTPS for API calls and the registered receiver. HTTP URLs are rejected.
Receiver readiness
Deploy and verify accessibility before registering the URL. The receiver must accept incoming HTTP requests.
Backend-only credentials
Store merchant keys securely. Do not expose API credentials in browser or mobile code.
Configuration audit
Log setup and retrieval responses for troubleshooting and auditing. Keep credentials out of logs.
Periodic verification
Retrieve the configured URL periodically and confirm it remains the expected endpoint.

Incoming notifications · details to confirm

This reference covers webhook management only. The source does not provide an incoming notification implementation contract. Obtain the following details from 3ribe rather than assuming a schema or delivery behaviour.

Contract areaNot specified in the sourceContract area / Not specified in the source
Request format
Incoming HTTP method, content type and exact notification payload.
Event catalogue
Supported event types and their meaning.
Verification
Signature or other notification-validation mechanism.
Acknowledgement
Expected receiver response format and acknowledgement behaviour.
Delivery
Retry policy and delivery guarantees.
Keep payment confirmation separate
The Webhook Management API confirms configuration, not transaction success. For collection payments, verify the final payment outcome before fulfilment and use idempotent notification processing to avoid duplicate updates.
RELATED REFERENCECollection APIInitiate, process and verify customer payments.
3ribe API reference · v1.0REST / JSON