Shopify orders/create webhook payload example

Shopify · event: orders/create · content type: application/json

This is a representative sample — fake IDs, real structure. To see a payload with your data, point the provider at a capture URL (button below).

See it live, not frozen

One click creates a free capture bin with this exact payload already in it — pretty-printed, headers inspectable, replayable to your own endpoint:

Then paste the bin's URL into Shopify's webhook settings to capture a real delivery. No signup.

Headers

content-type: application/json
x-shopify-topic: orders/create
x-shopify-hmac-sha256: XWmrwMey6OsLMeiZKwP4FppHH3cmAiiJJAweH5Jo4bM=
x-shopify-shop-domain: example-store.myshopify.com
x-shopify-api-version: 2025-07
x-shopify-webhook-id: b54557e4-bdd9-4b37-8a5f-bf7d70bcd043
x-shopify-triggered-at: 2026-08-29T00:00:00.000000Z

Body

{
  "id": 5678901234567,
  "admin_graphql_api_id": "gid://shopify/Order/5678901234567",
  "email": "jane.doe@example.com",
  "created_at": "2026-08-28T17:00:00-07:00",
  "currency": "USD",
  "current_total_price": "29.95",
  "financial_status": "paid",
  "fulfillment_status": null,
  "name": "#1001",
  "order_number": 1001,
  "test": false,
  "line_items": [
    {
      "id": 13579246801234,
      "title": "Ceramic Mug",
      "quantity": 1,
      "price": "29.95",
      "sku": "MUG-01",
      "product_id": 8642097531234,
      "variant_id": 46813572901234
    }
  ],
  "customer": {
    "id": 7418529637418,
    "email": "jane.doe@example.com",
    "first_name": "Jane",
    "last_name": "Doe"
  }
}

Things that bite people

X-Shopify-Hmac-SHA256 is a base64 HMAC-SHA256 of the raw body (GitHub-style hex verifiers fail on it) — try it in the signature debugger.
Money fields are strings ("29.95"), not numbers, and order/product IDs exceed 2^32 — use 64-bit/deserializer-safe types.
Respond 2xx in under 5 seconds. Delivery details, retry cadence, and the auto-removal trap: Shopify webhook testing.

Send it yourself

Reproduce this delivery against any endpoint (your handler, a bin, staging):

$ curl -X POST https://your-endpoint.example/hook \
  -H 'content-type: application/json' \
  -H 'x-shopify-topic: orders/create' \
  -H 'x-shopify-hmac-sha256: XWmrwMey6OsLMeiZKwP4FppHH3cmAiiJJAweH5Jo4bM=' \
  -H 'x-shopify-shop-domain: example-store.myshopify.com' \
  -H 'x-shopify-api-version: 2025-07' \
  -H 'x-shopify-webhook-id: b54557e4-bdd9-4b37-8a5f-bf7d70bcd043' \
  -H 'x-shopify-triggered-at: 2026-08-29T00:00:00.000000Z' \
 -d '{"id":5678901234567,"admin_graphql_api_id":"gid://shopify/Order/5678901234567","email":"jane.doe@example.com","created_at":"2026-08-28T17:00:00-07:00","currency":"USD","current_total_price":"29.95","financial_status":"paid","fulfillment_status":null,"name":"#1001","order_number":1001,"test":false,"line_items":[{"id":13579246801234,"title":"Ceramic Mug","quantity":1,"price":"29.95","sku":"MUG-01","product_id":8642097531234,"variant_id":46813572901234}],"customer":{"id":7418529637418,"email":"jane.doe@example.com","first_name":"Jane","last_name":"Doe"}}'

← All payload examples · Related guide · Signature debugger · Docs