Picqer Webhooks

When to Use This Skill

• How do I receive Picqer webhooks?
• How do I verify Picqer webhook signatures (X-Picqer-Signature)?
• How do I handle orders.completed, picklists.closed, or products.stock_changed events?
• Why is my Picqer webhook signature verification failing?
• Setting up a Picqer hook via the API (POST /api/v1/hooks)

Verification (core)

Picqer signs the raw request body with HMAC-SHA256 keyed on the per-hook secret you set when creating the hook, and sends the digest base64-encoded in the X-Picqer-Signature header. Pass the raw body (never re-serialized JSON) and compare timing-safe.