Trigger test webhook event

curl --request POST \
  --url https://api.atoa.me/api/webhook/test \
  --header 'Authorization: Bearer <sandbox-token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "eventType": "PAYMENTS_STATUS"
}'

curl --request POST \
  --url https://api.atoa.me/api/webhook/test \
  --header 'Authorization: Bearer <sandbox-token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "eventType": "PAYMENTS_STATUS",
  "orderId": "test-order-001",
  "amount": 10.05,
  "paymentMethod": "CARD",
  "status": "AUTHORIZED"
}'

curl --request POST \
  --url https://api.atoa.me/api/webhook/test \
  --header 'Authorization: Bearer <sandbox-token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "eventType": "POS_PAYMENT_STATUS",
  "type": "PAYMENTS_STATUS",
  "status": "COMPLETED",
  "customFields": [{ "value": "CUST_001", "fieldName": "Customer ID" }]
}'

import requests

url = "https://api.atoa.me/api/webhook/test"
payload = {
    "eventType": "PAYMENTS_STATUS",
    "orderId": "test-order-001",
    "amount": 10.05,
    "paymentMethod": "CARD",
    "status": "AUTHORIZED"
}
headers = {
    "Authorization": "Bearer <sandbox-token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)
print(response.json())

const response = await fetch("https://api.atoa.me/api/webhook/test", {
  method: "POST",
  headers: {
    Authorization: "Bearer <sandbox-token>",
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    eventType: "PAYMENTS_STATUS",
    orderId: "test-order-001",
    amount: 10.05,
    paymentMethod: "CARD",
    status: "AUTHORIZED",
  }),
});

const data = await response.json();
console.log(data);

{
  "message": "Test webhook triggered successfully."
}

{
  "name": "BAD_REQUEST",
  "message": "Webhook test triggers are only supported for sandbox tokens.",
  "status": 400
}

{
  "name": "BAD_REQUEST",
  "message": "status=\"AUTHORIZED\" is not valid for REFUND_STATUS. Valid: COMPLETED, CANCELLED, FAILED.",
  "status": 400,
  "errors": []
}

{
  "name": "UNAUTHORIZED",
  "message": "Unauthorized",
  "status": 401,
  "errors": []
}

{
  "name": "NOT_FOUND",
  "message": "No webhook subscription is configured for this merchant and event.",
  "status": 404
}

POST

api

webhook

test

curl --request POST \
  --url https://api.atoa.me/api/webhook/test \
  --header 'Authorization: Bearer <sandbox-token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "eventType": "PAYMENTS_STATUS"
}'

curl --request POST \
  --url https://api.atoa.me/api/webhook/test \
  --header 'Authorization: Bearer <sandbox-token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "eventType": "PAYMENTS_STATUS",
  "orderId": "test-order-001",
  "amount": 10.05,
  "paymentMethod": "CARD",
  "status": "AUTHORIZED"
}'

curl --request POST \
  --url https://api.atoa.me/api/webhook/test \
  --header 'Authorization: Bearer <sandbox-token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "eventType": "POS_PAYMENT_STATUS",
  "type": "PAYMENTS_STATUS",
  "status": "COMPLETED",
  "customFields": [{ "value": "CUST_001", "fieldName": "Customer ID" }]
}'

import requests

url = "https://api.atoa.me/api/webhook/test"
payload = {
    "eventType": "PAYMENTS_STATUS",
    "orderId": "test-order-001",
    "amount": 10.05,
    "paymentMethod": "CARD",
    "status": "AUTHORIZED"
}
headers = {
    "Authorization": "Bearer <sandbox-token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)
print(response.json())

const response = await fetch("https://api.atoa.me/api/webhook/test", {
  method: "POST",
  headers: {
    Authorization: "Bearer <sandbox-token>",
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    eventType: "PAYMENTS_STATUS",
    orderId: "test-order-001",
    amount: 10.05,
    paymentMethod: "CARD",
    status: "AUTHORIZED",
  }),
});

const data = await response.json();
console.log(data);

{
  "message": "Test webhook triggered successfully."
}

{
  "name": "BAD_REQUEST",
  "message": "Webhook test triggers are only supported for sandbox tokens.",
  "status": 400
}

{
  "name": "BAD_REQUEST",
  "message": "status=\"AUTHORIZED\" is not valid for REFUND_STATUS. Valid: COMPLETED, CANCELLED, FAILED.",
  "status": 400,
  "errors": []
}

{
  "name": "UNAUTHORIZED",
  "message": "Unauthorized",
  "status": 401,
  "errors": []
}

{
  "name": "NOT_FOUND",
  "message": "No webhook subscription is configured for this merchant and event.",
  "status": 404
}

Sends a test webhook to your sandbox URL. Body and signature match a production event — verify your endpoint without creating a real payment.

Sandbox-only — production keys are rejected. Delivers to all sandbox endpoints subscribed to the specified eventType.

Authorization

Bearer <sandbox-token> Request Body Schema

string

required

The webhook event to simulate.

Possible values

PAYMENTS_STATUS — payment-status webhook (pay-by-bank or card)
EXPIRED_STATUS — payment expired (customer didn’t pay in time)
REFUND_STATUS — refund-status webhook
POS_PAYMENT_STATUS — POS event — choose which event to simulate via type

string

Override the orderId. Defaults to a generated test value.

number

Override the paidAmount in pounds (e.g. 10.05 for £10.05). Defaults to a test value.

string

Override the paymentMethod.

Possible values

CARD
PAY_BY_BANK

string

Override the status. Valid values depend on eventType:

Allowed values per event

PAYMENTS_STATUS → COMPLETED | AUTHORIZED (CARD only) | FAILED
REFUND_STATUS → COMPLETED | CANCELLED | FAILED
EXPIRED_STATUS → ignored (always emits EXPIRED)
POS_PAYMENT_STATUS → depends on type (see below)

string

POS_PAYMENT_STATUS only — selects which POS event to simulate.

Possible values

PAYMENTS_STATUS — a completed POS payment (default)
REFUND_STATUS — a POS refund
EXPIRED_STATUS — an expired POS payment

Rejected for non-POS events.

array

POS_PAYMENT_STATUS only — custom field entries for the payload. Defaults to a test fixture. Rejected for non-POS events.

Show child attributes

string

The custom field value (e.g. a customer ID).

string

The label for the field (e.g. “Customer ID”).

Response

string

Confirmation that the test webhook was dispatched. Payload arrives at your registered URL asynchronously.

curl --request POST \
  --url https://api.atoa.me/api/webhook/test \
  --header 'Authorization: Bearer <sandbox-token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "eventType": "PAYMENTS_STATUS"
}'

curl --request POST \
  --url https://api.atoa.me/api/webhook/test \
  --header 'Authorization: Bearer <sandbox-token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "eventType": "PAYMENTS_STATUS",
  "orderId": "test-order-001",
  "amount": 10.05,
  "paymentMethod": "CARD",
  "status": "AUTHORIZED"
}'

curl --request POST \
  --url https://api.atoa.me/api/webhook/test \
  --header 'Authorization: Bearer <sandbox-token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "eventType": "POS_PAYMENT_STATUS",
  "type": "PAYMENTS_STATUS",
  "status": "COMPLETED",
  "customFields": [{ "value": "CUST_001", "fieldName": "Customer ID" }]
}'

import requests

url = "https://api.atoa.me/api/webhook/test"
payload = {
    "eventType": "PAYMENTS_STATUS",
    "orderId": "test-order-001",
    "amount": 10.05,
    "paymentMethod": "CARD",
    "status": "AUTHORIZED"
}
headers = {
    "Authorization": "Bearer <sandbox-token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)
print(response.json())

const response = await fetch("https://api.atoa.me/api/webhook/test", {
  method: "POST",
  headers: {
    Authorization: "Bearer <sandbox-token>",
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    eventType: "PAYMENTS_STATUS",
    orderId: "test-order-001",
    amount: 10.05,
    paymentMethod: "CARD",
    status: "AUTHORIZED",
  }),
});

const data = await response.json();
console.log(data);

{
  "message": "Test webhook triggered successfully."
}

{
  "name": "BAD_REQUEST",
  "message": "Webhook test triggers are only supported for sandbox tokens.",
  "status": 400
}

{
  "name": "BAD_REQUEST",
  "message": "status=\"AUTHORIZED\" is not valid for REFUND_STATUS. Valid: COMPLETED, CANCELLED, FAILED.",
  "status": 400,
  "errors": []
}

{
  "name": "UNAUTHORIZED",
  "message": "Unauthorized",
  "status": 401,
  "errors": []
}

{
  "name": "NOT_FOUND",
  "message": "No webhook subscription is configured for this merchant and event.",
  "status": 404
}

Overview

Reference

Webhook

Card on File

Trigger test webhook event

Authorization

​Authorization

Authorization