API and webhooks
How do I check a webhook really came from Fliok?
Every delivery is signed with HMAC-SHA256 over the timestamp and the raw request body, using your endpoint’s secret. Recompute the signature on your side and compare. The API documentation has the exact headers and working examples in Node.js, Python and PHP.
Still need help?
Email hello@fliok.com or use the contact form. We reply within one business day, Monday to Saturday, 9 AM to 7 PM IST.