Identity verification: vendors upload an ID or business licence (JPG, PNG or PDF up to 5 MB) under Settings in their dashboard. Review it from the vendor screen or the Verification pending view: View document, Approve, Reject (with an optional reason) or Delete. The vendor is emailed the decision. Verified stores show a badge on their store page, in the store directory and next to Sold by. Tick Vendors must be verified before their products can be bought to stop unverified vendors from selling.
Documents are protected by .htaccess and web.config files. On nginx, add a rule that denies uploads/storefold-multivendor-for-woocommerce-pro/.
Vendor app: with Let vendors install the dashboard on their phone and get new order alerts ticked, vendors can add the dashboard to their home screen. After clicking Enable order alerts they hear a chime and see a notification when a new paid order arrives while the dashboard is open. It uses your site icon (Appearance, Customize, Site Identity).
Activity log: Keep the activity log for sets how many days entries are kept.
Webhooks send marketplace events to Zapier, Make, n8n or your own system as signed JSON.
- Paste the receiving address into Webhook URL and click Save settings. Addresses on your own network (localhost or private IPs) are refused.
- Copy the Signing secret shown below it into the receiving system.
- Each request carries
X-Storefold-Event (the event name), X-Storefold-Signature (the HMAC SHA-256 of the raw body with your secret) and X-Storefold-Timestamp. Compare the signature to be sure the request came from your site, and refuse old deliveries.
Events: vendor.registered, vendor.approved, order.created, order.paid, order.refunded, withdrawal.requested, withdrawal.paid, dispute.opened, plan.assigned. Leave the URL empty to switch webhooks off.