Expected merchant webhook endpoint for Maya TERMINAL_ACTIVITY_DATA_READY events.
Maya sends this POST when encrypted terminal activity data is available for download. Verify authenticity using X-Maya-Webhook-Signature and X-Maya-Webhook-Timestamp (see Webhook Security on developers.maya.ph), deduplicate with Idempotency-Key / id, acknowledge with any 2xx, then download, decrypt, and verify the file checksum asynchronously.
200Webhook accepted. Any 2xx response is treated as successful delivery. Keep handling asynchronous; do not parse the terminal activity data file synchronously in the request path.
400Client error. Treated as a failed delivery; Maya retries non-2xx responses for up to 1 hour.
401Unauthorized. Treated as a failed delivery; Maya retries non-2xx responses for up to 1 hour.
500Merchant processing failure. Maya retries non-2xx responses using exponential backoff for up to 1 hour.