Skip to main content
WEBHOOK

Headers

x-hmac-signature
string

The signature of the request body calculated based on the secret HMAC key of the account.

Body

application/json
id
string<uuid>
required

The unique identifier for the event.

Example:

"8c2a6e4d-1f9b-4d5a-c7e3-2b8f6d4a9c1e"

created_at
string<date-time>
required

The timestamp when the event was created.

Example:

"2026-02-03T10:00:05Z"

type
enum<string>
required

The type of event that occurred.

Available options:
network.token.updated,
pci.token.security-code.expired
reason
string
required

A human readable reason description why the event was triggered.

Example:

"The scheme updated the network token."

Response

Confirmation of receipt. For other status codes, the system will try to redeliver.