Webhook Events
Kyc updated
Fired whenever a customer’s KYC status changes.
The status field is one of not_started, in_progress, submitted, approved, denied (see the payload schema); approved: bool is kept for back-compat. KYC is org-level, so customerId is the identifier to key on and walletPublicKey is best-effort.
On a denial, updateReason and userMessage explain what needs to be corrected. When needsWork is true, the customer can resubmit without creating a new KYC request.
WEBHOOK
Authorizations
API key sent in the Authorization header.
Headers
HMAC-SHA256 signature: sha256={hex}. Computed over the canonicalized (RFC 8785) request body using your webhook secret.
Body
application/json
Webhook envelope for KYC review decisions.
Payload for kyc_updated webhooks.
Example:
Response
200
Return any 2xx to acknowledge receipt.