> ## Documentation Index
> Fetch the complete documentation index at: https://api-docs.nowbookit.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Partner Inbound Webhooks

> Register NowBookIt-hosted endpoints as webhook targets in your POS or system to push events to NowBookIt in real time.

Your system calls these NowBookIt-hosted endpoints to push events. Register them as webhook targets in your POS or integration platform.

<Info>
  **Direction:** Your system → NowBookIt. These endpoints are enabled per partner as part of onboarding. Contact [platform.integrations@nowbookit.com](mailto:platform.integrations@nowbookit.com) to get started.
</Info>

***

## Two integration types

<CardGroup cols={2}>
  <Card title="Bookings & Sales" icon="receipt" href="/ipos/partner-inbound/bookings-sales">
    Push POS sales and booking events to NowBookIt. **Custom-built per partner** — NowBookIt maps your payload format to NowBookIt's data model during onboarding.
  </Card>

  <Card title="Gift Cards" icon="gift" href="/ipos/partner-inbound/gift-cards">
    Redeem and check gift card balances via NowBookIt. **Custom-built per partner** — NowBookIt maps your payload format to NowBookIt's data model during onboarding.
  </Card>
</CardGroup>

***

## Authentication

<Warning>
  Partner inbound endpoints do **not** use `X-API-KEY`. All requests are authenticated via **HMAC signature**.

  At onboarding you receive:

  * A **signature header name** to send with every request (e.g. `X-Partner-Signature`)
  * A **shared secret** to generate the HMAC signature, computed over the request body + URL

  Requests with a missing or invalid signature are rejected with `400 Bad Request`.
</Warning>

***

## Onboarding checklist

| Item                  | Description                                                                                     |
| --------------------- | ----------------------------------------------------------------------------------------------- |
| Signature header name | The header your system sends (e.g. `X-Partner-Signature`)                                       |
| Shared HMAC secret    | Used to sign requests — never commit to source control                                          |
| Partner identifier    | Your `partnerName` for URL paths                                                                |
| Location mapping      | How your `locationId` values map to NowBookIt venues                                            |
| Payload schema        | For Bookings & Sales — agree the request body format so NowBookIt can build your custom handler |