Common Types
These types are reused across multiple event payloads.Order events
Order events
ORDER_CREATED
Cart converted into an order during checkout, before payment.ORDER_CONFIRMED
Payment processed successfully, before fulfillment.ORDER_COMPLETED
Order fully complete. Payment processed and fulfillment finished.ORDER_CANCELLED
Order cancelled.ORDER_REFUNDED
Order refunded.Customer events
Customer events
Invoice events
Invoice events
Payment events
Payment events
Product events
Product events
PRODUCT_CREATED
New product created.PRODUCT_UPDATED
Product details modified.PRODUCT_PUBLISHED
Product made visible in the storefront.PRODUCT_DRAFT_DISCARDED
Product draft discarded.PRODUCT_ARCHIVED
Product archived.PRODUCT_UNARCHIVED
Product restored from archive.Product variant events
Product variant events
Product price events
Product price events
Product media events
Product media events
Product deliverable events
Product deliverable events
Product variant deliverable events
Product variant deliverable events
Webhook Security
Agent webhook actions support custom headers, so you can include a secret key to verify that incoming requests are from Colossal. When configuring a webhook action in your agent, add an authorization header with a secret value:Best Practices
- Use a secret header - Add a shared secret to your webhook headers to verify requests
- Handle duplicate events - Use
correlation_idfor idempotency - Return 200 quickly - Process events asynchronously
- Handle retries - We retry failed webhooks up to 3 times
- Monitor webhook endpoints - Ensure high availability