Foxpay endpoint
https://app.foxpay.it/api/shopify/webhook
Shopify integration
Use the Shopify integration when a merchant wants Shopify checkout to create a pending order, while Foxpay sends the buyer a secure hosted payment link by email and reconciles payment state afterwards.
Important webhook clarification
Shopify webhook setup is different from Stripe. A separate whsec_ secret is not created or displayed by Shopify.
- Shopify does not expose a Stripe-style `whsec_...` webhook secret.
- Shopify signs webhook deliveries with `X-Shopify-Hmac-Sha256` using the app Client Secret.
- Foxpay uses the Client Secret you save in the Shopify setup to verify incoming Shopify webhooks.
- Foxpay creates the required Shopify webhook subscriptions automatically after the credentials are saved.
Signing secret
Shopify app Client Secret
Buyer handoff
Foxpay hosted checkout link sent by email
Setup sequence
Follow this order so the merchant, Shopify checkout, buyer email, and Foxpay admin view all line up.
Create or open your Shopify custom app
In the Shopify Dev Dashboard or store admin app settings, copy the app Client ID and Client Secret. Do not look for a `whsec_` value; Shopify does not generate one for webhooks.
Save credentials in Foxpay
Open the store setup in Foxpay, select Shopify, enter the shop domain, Client ID, and Client Secret, then save. Foxpay validates the connection and registers the Shopify webhook subscriptions.
Add the manual payment method in Shopify
Create a manual payment method in Shopify Payments settings. Use clear Foxpay wording so buyers understand that the payment link arrives by email after checkout.
Run a test order
Place a low-value test order with the Foxpay manual payment method. The order should stay pending in Shopify while Foxpay creates a hosted checkout link and sends the buyer payment email.
Confirm reconciliation
After the buyer pays, Foxpay updates the transaction and syncs the final payment state back into the merchant workflow. Use the Foxpay admin panel for support lookup by order ID or payment ID.
Shopify manual payment method
The manual payment method is what the buyer sees in Shopify checkout. Keep the label direct and describe the email handoff.
Payment method name
Pay securely via Foxpay
Additional details / payment instructions
After placing your order, you will receive a secure Foxpay payment link by email.
Please complete the payment there. Your order is processed after payment confirmation.Merchant checklist
- Use the `.myshopify.com` domain or the canonical shop domain shown in Shopify.
- Keep Shopify Client Secret server-side and store it only in Foxpay; never send it to buyers or theme code.
- Use test mode first when the Foxpay store is not fully live.
- Keep the manual payment instructions short. Buyers should know that the next action happens through the Foxpay email link.
- Do not create manual Shopify webhooks unless Foxpay support explicitly asks for a fallback check.
Runtime buyer flow
- Buyer chooses the Foxpay manual payment method in Shopify checkout.
- Shopify creates a pending order and sends the order webhook to Foxpay.
- Foxpay verifies Shopify HMAC, creates a pending Foxpay payment, and sends the buyer a secure payment link by email.
- Buyer completes the hosted Foxpay checkout.
- Foxpay records the payment outcome and keeps the merchant/admin view aligned with the order state.
Admin and support lookup
- Use Shopify order ID, buyer email, Foxpay payment ID, or store name to find the case.
- Confirm whether the Shopify webhook was accepted before asking the merchant to retry setup.
- Check whether the Foxpay email was queued, sent, or blocked before resending payment instructions.
- Do not ask merchants for a Shopify
whsec_; ask for the Client ID, Client Secret, and shop domain.
Troubleshooting
Most setup failures are credential, domain, or payment-method wording issues. Start with these checks.
Expected. That prefix belongs to Stripe-style webhook endpoint secrets, not Shopify. Enter the Shopify Client Secret in Foxpay.
Check the shop domain, app credentials, Admin API access scopes, and whether the store is reachable from Foxpay.
Confirm the Shopify order was created with the Foxpay manual payment method and that the buyer email exists on the order.
Search in Foxpay by Shopify order ID or Foxpay payment ID, then check payment status and webhook delivery history before changing Shopify state manually.
Security notes
- Foxpay verifies Shopify webhook HMAC against the raw request body before processing the order payload.
- Client Secret rotation can temporarily affect webhook signing. Coordinate rotation with Foxpay support for live merchants.
- The Shopify Client Secret is a credential, not buyer-facing setup text. Never paste it into Shopify payment instructions, emails, theme code, or screenshots.
- Use Foxpay test mode for onboarding checks unless the merchant explicitly needs a production send-path test.