webhooks

CDP settlement webhook (GPVRecorded)

Terminates Coinbase/CDP (Hook0) webhook deliveries for the GPVRecorded event and republishes the raw body onto the GPV topic. Authenticated by the X-Hook0-Signature header (HMAC verified against the tenant's sealed gpv_secret, 5m/30s replay window) — NOT by enforcer bearer/API-key auth. Same status contract as the Routed edge: 200 for anything CDP should not retry, 401 on a bad signature, 503 only for a transient publish failure. Success and 401/503 bodies are plain status text; only the 400 is JSON.

post/webhooks/cdp/{tenant_id}/gpv

Request

  • Base URL: https://api.instruxi.dev/api/v1/enforcer
  • URL: https://api.instruxi.dev/api/v1/enforcer/webhooks/cdp/{tenant_id}/gpv
  • Auth: none declared. Required headers: X-Hook0-Signature

Path parameters

tenant_idstring required

tenant UUID the webhook is registered under

Headers

X-Hook0-Signaturestring required

Hook0 signature: t=<unix seconds>,h=<space-separated signed header names>,v1=<hex HMAC-SHA256 over t.h.values.body>

Response

accepted

Changes

No recorded changes to this operation across all 1 revision of this API.