Smile API Webhooks

Smile API (getsmileapi.com) is an employment, income, and financial-data aggregator for Southeast Asia (Philippines-focused). It POSTs JSON webhooks to your HTTPS endpoint when a user connects an account, a task finishes, or new data is added. Each delivery carries a Smile-Signature header you verify with HMAC-SHA512 (hex) over the raw request body.

Not Smile.io (loyalty/rewards) and not Smile Identity (KYC). The signature header is Smile-Signature (no X- prefix) and the algorithm is SHA-512, not SHA-256. Smile does not use the Standard Webhooks spec.

When to Use This Skill

• How do I receive Smile API (getsmileapi.com) webhooks?
• How do I verify the Smile-Signature header?
• Why is my Smile webhook signature verification failing?
• How do I handle ACCOUNT_CONNECTED, TASK_FINISHED, or INCOMES_ADDED events?
• How do I dedupe Smile webhook retries?