---
title: 21.2 Required Request Format
description: "Signature Calculation: The signature is an HMAC-SHA256 over:"
url: "https://peikly.com/docs/integrations-request-format/"
updated: "2026-10-10"
category: External Integrations
tags:
  - Manual sync
---

# 21.2 Required Request Format

**Endpoint:** `POST /api/integrations/events`

**Required Headers:**

```
Authorization: Bearer {your_tenant_api_token}
X-ArtinCRM-Timestamp: {UTC ISO-8601 or Unix timestamp}
X-ArtinCRM-Nonce: {unique nonce for this request}
X-ArtinCRM-Signature: {HMAC-SHA256 signature}
```

**Signature Calculation:** The signature is an HMAC-SHA256 over:

```
{timestamp}\n{nonce}\n{raw_request_body}
```

Using the raw Bearer token value as the HMAC key. The result is lowercase hex, optionally prefixed with `sha256=`.

**Required JSON Body Fields:**

```json
{
  "provider": "woocommerce",
  "connection": {
    "externalInstanceId": "your-store-id"
  },
  "eventType": "order.completed",
  "externalEventId": "unique-event-id-12345",
  "payload": {
    // any additional event data
  }
}
```