MooChedda will POST a signed invoice.paid event to this URL when a payment is received. Verify the X-MooChedda-Signature header using your secret.

Your website's server uses a key to create invoices for QR checkout. A key can only create invoices paying this store — it can't move funds. Never put it in browser code.