http://localhost. The CLI solves this by opening a tunnel that relays real events from your organization straight to a port on your machine, signed exactly like production.
This walkthrough gets you receiving and verifying events locally in a few minutes.
Macropay is the Merchant of Record. Tax-relevant events (orders, refunds, disputes) reflect activity where we’ve already remitted sales tax/VAT on your behalf — so your handlers stay focused on app logic, not compliance math.
What you’ll need
- The Macropay CLI installed and authenticated
- A local server listening on a known port (e.g.
http://localhost:3000) - A route in your app ready to accept
POSTrequests with a JSON body
Steps
1
Install the CLI
On macOS, Linux, or WSL:
2
Authenticate
Link the CLI to your Macropay account. This opens a browser to complete login.
3
Start the tunnel
Point the listener at the local URL your server runs on. The CLI forwards every webhook your organization emits to that address.If your account has more than one organization, you’ll be asked to pick which one to stream events for:
4
Set the signing secret
Copy the
Secret printed above and add it to your local environment. Your app uses it to verify that each incoming request genuinely came from Macropay.5
Receive an event
Trigger an action in the dashboard — create a test order, start a subscription, or send an agent signal — and watch it land on your handler. Macropay signs payloads with the Standard Webhooks spec, so verification is one call in any SDK.
How the tunnel works
listen. Nothing about the payload or its signature changes in transit — what you receive locally is byte-for-byte what production would deliver, so a handler that passes here passes when you deploy.