Get orders in seconds

If you connected Shopify with the Install button, you can skip this whole page — the webhooks were set up during the install and are already running.

If you connected by pasting a Client ID and Client secret, they cannot be. Shopify signs each message with the key of whatever created the subscription, and a private app’s key does not work for this — every message would arrive and be rejected. So the webhooks have to be made in the ordinary part of your Shopify admin, where Shopify signs them with a single shop-wide key that you then paste into Shopdeck.

That key is the whole trick. Six webhooks and one key, and it works.

Every webhook points at the same address, and it carries your workspace’s own identifier. Do not build it yourself — copy it from Shopdeck.

1. Open Setup and scroll to Live visitor tracking

   In Shopdeck: Setup, then the card at the very bottom, Live visitor tracking. Under item 3 you will find Shopify order webhook URL with a copy button beside it.

2. Copy it and keep it somewhere

   It looks like this, with your own identifier at the end:

   The shape of the addressCopy

   https://app.shopdeck.io/api/profit/webhooks/shopify?ws=00000000-0000-0000-0000-000000000000

   The part after ws= matters

   That is which workspace the order belongs to. Copy the whole line including everything after the question mark. Truncate it and Shopify will deliver to nowhere.

1. Find the webhooks page

   In your Shopify admin:

   SettingsNotificationsWebhooks

   Webhooks is a section right at the bottom of the Notifications page — keep scrolling.

2. Add the first one

   Press Create webhook. A small dialog appears with four things to fill in:

   • Event — pick Order creation.
   • Format — JSON.
   • URL — paste the address you copied.
   • Webhook API version — pick the latest stable version offered. If you are unsure, pick the one at the top that is not labelled as a release candidate.

   Press Save.

3. Repeat for the other five

   Same address, same format, same version, different event. Create one for each of these:

   Event	What it gives you
   Order creation	A sale appears the moment it is placed. The important one.
   Order payment	The order is marked paid without waiting for the next sync.
   Order update	Edits, cancellations and status changes come straight through.
   Refund create	A refund lands in your profit figure immediately instead of hours later.
   Checkout creation	Somebody entering the checkout shows on Live. Optional.
   Checkout update	Their progress through the checkout stays current. Optional.

   The first four are the ones that matter for money. The two checkout ones only feed the Live page, so skip them if you like.

4. Copy the signing secret

   Underneath the list of webhooks, on that same page, Shopify shows a line reading something like “All your webhooks will be signed with …” followed by a long string of about 64 characters.

   Copy it. That is the key Shopdeck needs to know the messages really come from your shop.

1. Back to the Shopify card in Setup

   app.shopdeck.io/setup?service=shopify.

2. Into the field called Webhook signing secret

   Paste it there and press Save. Nothing else on the card changes.

   Watch for a trailing space

   This key is checked character by character. One invisible space copied along with it and every single message is rejected — with no visible error anywhere, because a rejected message simply does not arrive.

There is no green light for this on the Setup page. You confirm it on the health screen instead.

1. Open the health screen

   Profit Dashboard → Data health. Look at the table headed Sources.

2. Look for a row named shopify_webhook

   After your next order — or your next visitor reaching the checkout, if you added those two — a row with that name appears, with a message like orders/create — 1 row(s) written.

   If instead it says refused: signature does not match, the key is wrong or has a stray space. Copy it again from Shopify, paste, save.