Register these NowBookIt-hosted endpoints as webhook targets in your POS or system. NowBookIt processes each event to sync bookings and sales.
Endpoints
Authentication
These endpoints use HMAC signature authentication — not X-API-KEY.
At onboarding you receive:
- A signature header name (e.g.
X-Partner-Signature)
- A shared secret to compute the HMAC over request body + URL
Requests missing or with invalid signatures are rejected with 400 Bad Request.
Do not use X-API-KEY for partner inbound webhooks. HMAC signing is required.