Webhook Events
Kyc updated
Fired when a programmatic KYC submission is reviewed.
Statuses: kyc_proposed → kyc_approved (or kyc_rejected).
On rejection, updateReason and userMessage explain what needs to be corrected. When needsWork is true, the customer can resubmit without creating a new KYC request.
WEBHOOK
Authorizations
API key sent in the Authorization header.
Headers
HMAC-SHA256 signature: sha256={hex}. Computed over the canonicalized (RFC 8785) request body using your webhook secret.
Body
application/json
Webhook envelope for KYC review decisions.
Payload for kyc_updated webhooks.
Example:
{
"customerId": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
"walletPublicKey": "9Qx7rGN1kP2mL3nO4pQ5sR6tU7vW8xY9zA0bC1dE2fG",
"approved": true,
"updateReason": null,
"needsWork": null,
"userMessage": null
}Response
200
Return any 2xx to acknowledge receipt.