Webhook Payloads

signer_identity_verified

The signer passed identity-document verification (directly, or approved by the account after review). Subject: Signer · Object: Document · Payload: signer_full_name, and evidence when the provider keeps one: what was read off the document (document_type, document_name), cpf_match, name_similarity (0-1), for each check its name, result and score, and evidence_sha256. No images.

postWebhooksigner_identity_verified

Headers

webhook-idstring required

Message ID: the same on every attempt of this event to this endpoint. Use it to deduplicate retries.

webhook-timestampstring required

Unix timestamp (seconds) of this attempt.

webhook-signaturestring

Sent only when signing is enabled on the endpoint: v1,<base64 HMAC-SHA256>. See Verifying signatures.

Payload

idinteger required

ID of the activity that produced the event.

eventstring required

Event type. See List webhook event types.

messagestring nullable

Reserved; currently always null.

payloadobject nullable

Event-specific parameters; keys vary per event.

created_atinteger required

When the event was recorded (Unix timestamp, seconds).

subjectobject required

Who performed the action: a User, Signer or Account, plus a type property naming it.

objectobject required

What the action was performed on: a Document, Signer or Template with its relations expanded, plus a type property naming it.

account_idstring required

ID of the account that owns the event.

Example payload

{
  "id": 184467,
  "event": "signer_viewed_document",
  "origin": {
    "ip": "203.0.113.7",
    "user-agent": "Mozilla/5.0"
  },
  "created_at": 1790000000,
  "account_id": "65f1c2a9b3e4d5f6"
}

Response

Any 2xx response acknowledges the delivery. Any other status, a connection error or a timeout counts as a failed attempt.

Changes

Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.