Where to find this: Shopify admin → Apps → Yuko Loyalty → Integrations → Webhooks
What webhooks do
Webhooks notify your endpoint the moment a Yuko event happens — a customer earned points, a reward was redeemed, a tier changed. Faster, cheaper and more reliable than polling the REST API.When to use
- You’re syncing Yuko data into your data warehouse.
- You’re triggering downstream automations (Slack alerts, internal dashboards).
- You’re integrating Yuko with a tool that doesn’t have a Yuko connector.
- You’re building real-time UX around loyalty events.
Available events
customer.points.creditedcustomer.points.debitedcustomer.reward.issuedcustomer.reward.redeemedcustomer.tier.changedcustomer.referral.completedmembership.contract.activatedmembership.contract.cancelledmembership.contract.failed
Before you start
Yuko app is installed on your Shopify store — see Install Yuko on Shopify.
The Yuko Theme App Embed is enabled in your active theme.
Your loyalty program is enabled at Shopify admin → Apps → Yuko Loyalty → Loyalty → Settings.
Points label and currency are configured.
You have a publicly reachable HTTPS endpoint that can receive POST requests.
The endpoint can verify a signature on the request (recommended).
Setup
Create a subscription
Click New webhook. Enter:
- Endpoint URL — your HTTPS receiver.
- Events — pick which events to receive.
- Description — a label for your records.
Copy the signing secret
Yuko shows a one-time signing secret. Store it in your endpoint’s environment.
Payload format
Every webhook is a POST with JSON:Verifying signatures
Every webhook includes anX-Yuko-Signature header. Verify:
- Compute HMAC-SHA256 of the request body using your signing secret.
- Compare to the header (constant-time).
- Reject if it doesn’t match.
Retries and idempotency
- Yuko retries failed deliveries with exponential backoff for 24 hours.
- Each delivery has a unique
event_id— use it to dedupe on your side. - Respond
2xxwithin 30 seconds for success.
Best practices
FAQs
What if my endpoint goes down?
What if my endpoint goes down?
Yuko retries with exponential backoff for 24 hours. After that, the event is dropped from the queue but visible in the dashboard’s failed-deliveries log.
Can I subscribe multiple endpoints to the same event?
Can I subscribe multiple endpoints to the same event?
Yes — create one webhook per endpoint.
How do I rotate the signing secret?
How do I rotate the signing secret?
Edit the webhook and click Rotate secret. The old secret stops working after a 24-hour overlap.
Related
REST API
Read and write Yuko data programmatically.
Webhooks
Receive real-time event notifications.
Shopify Flow
Trigger Shopify Flow workflows from Yuko events.
Klaviyo
Sync customers, points and tier data into Klaviyo.
Omnisend
Sync loyalty data into Omnisend.
Engati
Conversational AI for loyalty events.
KwikEngage
Multi-channel messaging (SMS, WhatsApp).
Retainful
Email marketing & abandoned cart recovery.
Facebook & Instagram
Social verification for like / follow campaigns.
Google Business
Google Business profile and reviews.
Custom Apps
OAuth or API-key based custom integrations.
Book a Free Setup Call
Talk to our team for personalised setup help.Time: 30 minutes
Contact Support
Visit our support hub for help articles, live chat and ticket submission.
Browse the Guides
Documentation across loyalty, referrals, memberships and more.
Install Yuko
Add Yuko to your Shopify store from the Shopify App Store.