Security & OperationsWebhooks & IdempotencyVerify 6MM webhook signatures and process repeated notifications safely.Ask a question|Copy page|View as Markdown|More actionsWebhook headers HeaderDescriptionX-Agent-TimestampUnix timestamp in seconds.X-Agent-NonceReplay-protection nonce.X-Agent-SignatureHMAC-SHA256 signature. timestamp + nonce + rawBody Order idempotency CaseHandlingInitial transfer requestCreate one globally unique agentOrderNo.HTTP timeoutQuery the original agentOrderNo before creating a new one.PROCESSING responseWait for webhook or query order status.Repeated webhookDeduplicate by idempotency key and final status.
