Shopify Webhooks
How to Test Shopify Webhooks Locally (2026)
Shopify webhooks notify your application about store events like new orders, product updates, and customer registrations. Shopify signs webhooks with HMAC-SHA256 using your app's API secret.
With HookSense, point Shopify at a callback endpoint and let an AI agent await the result over MCP: create_callback_endpoint → wait_for_callback → verify_signature. Run npx @hooksense/mcp in Claude Desktop, Cursor, or any MCP client. No polling.
Signature Header
X-Shopify-Hmac-Sha256
Algorithm
HMAC-SHA256 (Base64)
Setup Guide
- 1Create a free HookSense endpoint at hooksense.com
- 2Copy your unique webhook URL
- 3In Shopify Admin → Settings → Notifications → Webhooks
- 4Click 'Create webhook' and select the event
- 5Paste your HookSense URL as the callback URL
- 6Your app's API secret key is used for HMAC — add it to HookSense
- 7Place a test order or update a product to trigger the webhook
Common Shopify Webhook Events
orders/createorders/updatedorders/paidorders/cancelledproducts/createproducts/updatecustomers/createapp/uninstalledForward to Localhost
Use HookSense CLI to forward Shopify webhooks directly to your local development server:
npx hooksense listen -p 3000 --path /api/integrations/shopifyNo ngrok or tunnel setup required. Install with npm i -g hooksense or use npx.
Tips & Best Practices
- Shopify uses Base64-encoded HMAC — HookSense handles this automatically
- Mandatory webhooks (GDPR) must be registered in your Partner Dashboard
- Use HookSense to inspect the full payload structure before writing your handler
- Shopify has rate limits on webhook subscriptions — monitor with HookSense
Related
Give your agent a Shopify callback
Create a free callback endpoint and have an agent await its first verified Shopify webhook over MCP. Paid plans are early-access.
Get Started Free