An order form has been generated from an approved quote

An order form has been generated from an approved quote version, and is now waiting for the customer's signature. It always follows a quote.approved event, emitted in the same transaction. This is a premium feature.

postWebhookorder_form_created

Headers

X-Lago-Signaturestring required
Example:AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8=

Signature of the webhook payload. The format depends on X-Lago-Signature-Algorithm: hmac is the Base64 encoding of an HMAC-SHA256 digest of the payload, jwt is an RS256 JSON Web Token (a string starting with eyJ).

X-Lago-Signature-Algorithm'jwt' | 'hmac' required
Example:hmac

Algorithm used to generate the signature

X-Lago-Unique-Keystring uuid required
Example:1a901a90-1a90-1a90-1a90-1a901a901a90

Unique id of the webhook. It can be used for idempotency

Payload

webhook_type'order_form.created' required
object_type'order_form' required
organization_idstring uuid required

Unique identifier of the organization, created by Lago.

Example payload

{
  "organization_id": "1a901a90-1a90-1a90-1a90-1a901a901a90",
  "order_form": {
    "lago_id": "1a901a90-1a90-1a90-1a90-1a901a901a90",
    "number": "OF-2026-0001",
    "status": "generated",
    "void_reason": "manual",
    "expires_at": "2026-06-30T23:59:59Z",
    "signed_at": "2026-04-29T08:59:51Z",
    "voided_at": "2026-04-29T08:59:51Z",
    "signed_document_url": "https://api.getlago.com/rails/active_storage/blobs/redirect/eyJfcmFpbHMi/OF-2026-0001",
    "lago_organization_id": "1a901a90-1a90-1a90-1a90-1a901a901a90",
    "lago_customer_id": "1a901a90-1a90-1a90-1a90-1a901a901a90",
    "lago_quote_id": "1a901a90-1a90-1a90-1a90-1a901a901a90",
    "lago_quote_version_id": "1a901a90-1a90-1a90-1a90-1a901a901a90",
    "created_at": "2026-04-29T08:59:51Z",
    "updated_at": "2026-04-29T08:59:51Z"
  }
}

Response

Return a 200 status to indicate that the data was received successfully

Changes

Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.