Webhook events

Point the Meta app callback at /api/webhooks/meta on your Zyptos host. The verify step uses the token you set for that app. Status events update a broadcast: sent, delivered, read, or failed.

Your own endpoints, added in Settings, receive message.received and campaign.finished as JSON. The X-Zyptos-Signature header is an HMAC SHA-256 of the raw body, using the secret shown when you create the endpoint.

Razorpay has its own callback at /api/webhooks/razorpay. That one uses Razorpay’s signature, not the Zyptos secret.