---
title: "crm.deal.won"
method: POST
path: "crm.deal.won"
---

# crm.deal.won

`POST crm.deal.won` (webhook)

Sent to every active endpoint subscribed to this event. Endpoints without a secret receive no signing header. When a secret is configured, verify `X-Custodo-Signature` before trusting the body: it is `t=<unix seconds>,v1=<hex HMAC-SHA256 of "<t>.<raw body>" keyed with the endpoint’s whsec_… secret>`; reject a `t` more than five minutes away. Answer any 2xx to acknowledge; anything else is retried with backoff.

## Headers

- `X-Custodo-Event` string, required
- `X-Custodo-Delivery` string, required
- `X-Custodo-Signature` string

## Payload

- object
  - `id` string, uuid, required: The delivery id.
  - `event` 'crm.deal.won', required
  - `tenant_id` string, uuid, required
  - `created_at` string, date-time, required
  - `data` object, required: The event’s own payload: ids and scalars, never content.
    - `dealId` string, required
    - `partyId` string, nullable, required
    - `pipelineId` string, required
    - `stageId` string, required
    - `ownerUserId` string, required
    - `amount` string, required
    - `currency` string, required

## Acknowledgement `2XX`

Acknowledged; nothing is retried.

---

[API](https://skmtc.dev/custodo/apis/custodo-integrazioni.md) · [All operations](https://skmtc.dev/custodo/apis/custodo-integrazioni/llms.txt) · [OpenAPI document](https://skmtc.dev/custodo/apis/custodo-integrazioni/revisions/16d336d3ec2a?raw)