How to Prepare Your System to Support Webhooks

You must set up a server with a URL to receive webhook notifications. You can also set up an additional URL for the health check service. For more information about how

Visa Acceptance Solutions

uses your health check URL, see Webhook Health Check URL and Automatic Revalidation.

Your system must support the

mutual trust

security policy to authenticate webhook notifications. Mutual trust is a simple authentication scheme that is included in the HTTP protocol. It is often used in conjunction with HTTPS to provide confidentiality through encryption.

In addition to mutual trust, you can also use the

OAuth

or

OAuth JWT

security policy to authenticate your webhook notifications.

You must have an organization or merchant account (MID) and REST API security keys.

If you do not have an account, you can sign up for

test

account on the Developer Center:

During the test account signup, you receive a REST API security key to test the APIs.

To create new REST API security keys, see the

Creating and Using Security Keys User Guide

.

To begin implementing webhooks through

Visa Acceptance Solutions

, you must set up your system to be REST compliant.

Visa Acceptance Solutions

uses the REST architecture for developing web services. REST enables communication between a client and server using HTTP protocols.

If you have not set up secure communications between your client and server using either a

JSON Web Token

or

HTTP signature

, see the

Getting Started with the REST API

.