klaviyo-webhooks-events

# Klaviyo Webhooks & Events ## Overview Set up Klaviyo webhooks with HMAC-SHA256 signature verification, event routing, idempotency handling, and the Webhooks API for programmatic subscription management. ## Prerequisites - Klaviyo account with webhooks enabled - HTTPS endpoint accessible from internet - API key with scopes: `webhooks:read`, `webhooks:write` - Redis or database for idempotency (recommended) ## Klaviyo Webhook Architecture Klaviyo webhooks fire when specific **topics** occur in your account. Each webhook is signed with a **secret key** using HMAC-SHA256. | Topic Category | Example Topics | |---------------|---------------| | Profile | `profile.created`, `profile.updated`, `profile.deleted` | | List | `list.member.added`, `list.member.removed` | | Segment | `segment.member.added`, `segment.member.removed` | | Campaign | `campaign.sent`, `campaign.delivered` | | Flow | `flow.triggered`, `flow.message.sent` | | Event | Custom metric events | ## Instructions ### Step 1: Create a Webhook via API ```typescript import { ApiKeySession, WebhooksApi } from 'klaviyo-api'; const session = new ApiKeySession(process.env.KLAVIYO_PRIVATE_KEY!); const webhooksApi = new WebhooksApi(session); // Create a webhook subscription const webhook = await webhooksApi.createWebhook({ data: { type: 'webhook', attributes: { name: 'Profile Updates', endpointUrl: 'https://your-app.com/webhooks/klaviyo', // The secret used for HMAC-SHA256 signing /...