API Key credentials and Webhook callback configuration
Our server will send HMAC-SHA256 signed HTTP POST callbacks when payments are matched.