Sell out smarter.Ticketing, registration, and seating — unified.

curl -X POST https://api.venco.io/v1/orders \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "buyer": { "email": "[email protected]", "name": "Alex Ortega" },
    "items": [
      { "event_id": "evt_123", "ticket_type": "general_admission", "quantity": 2 }
    ],
    "metadata": { "source": "website" }
  }'

import express from "express";
import crypto from "crypto";
const app = express();

app.post("/webhooks/venco", express.raw({ type: "application/json" }), (req, res) => {
  const signature = req.header("venco-signature");
  const secret = process.env.VENCO_WEBHOOK_SECRET;
  const expected = crypto.createHmac("sha256", secret).update(req.body).digest("hex");

  if (signature !== expected) return res.status(400).send("Invalid signature");

  const event = JSON.parse(req.body);

  if (event.type === "order.completed") {
    console.log("Order completed:", event.data.id);
  }
  res.sendStatus(200);
});

app.listen(3000);