Skip to main content

Getting Started

Webhook Setup

Punchh uses outbound webhooks to send event data to Strata in real-time.
1

Enable Webhooks for your Business

Webhooks management must be enabled for your business in the Punchh platform. Contact your Punchh representative to update this configuration.
If you cannot see Inbound Webhooks or Outbound Webhooks in the left navigation menu, webhooks have not been enabled for your business.
2

Configure Webhooks in Punchh

Follow the Configure Webhooks guide on the Punchh Support Portal to set up webhooks for your business.When configuring your webhook, use the Strata webhook URL provided in your integration settings and select HMAC-SHA256 as the authentication method.
To view Punchh product documentation on the Support Portal, you must be logged in to a Punchh production environment. See these instructions for access.

Webhook Security

Punchh supports the following authentication methods:
AuthDescription
BasicAuthorization: basic base64(USERNAME:PASSWORD)
BearerAuthorization: bearer TOKEN
HMAC-SHA1Authorization: hmac sha1(URI+BODY, SECRET) with x-pch-key: CLIENT header
HMAC-SHA256Authorization: hmac sha256(URI+BODY, SECRET) with x-pch-key: CLIENT header
Using no authentication is not recommended. Always select one of the methods above.